ثغرة خطيرة في PHP تهدد ملايين المواقع على الإنترنت | عرب نت 5

ثغرة خطيرة في PHP تهدد ملايين المواقع على الإنترنت | عرب نت 5

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page sa/news/arabnet5/news-d8-ab-d8-ba-d8-b1-d8-a9-d8-ae-d8-b7-d9-8a-d8-b1-d8-a9-d, snapshot 20261030T071422Z. Copied byte for byte; every file's sha256 is in captures/20261030T071422Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

An Egyptian general-news site (Arab Net 5) retells, in Arabic, a Wall Street Journal report on PHP2Shell. It says a Calif researcher found the flaw in August while reviewing PHP's source code with OpenAI's GPT-5.6 Sol under an OpenAI-backed programme for open-source projects, that Calif's chief executive contacted the PHP project's security engineer on 11 August, that Wiz's team independently found the flaw and its co-founder called it the most serious found with AI help up to then, that the PHP Foundation's security engineer called it among the most serious flaws the project had faced in over a decade and compared it to Heartbleed, that the team planned to release the fix on 22 October with details kept secret but a post on the Hacker News site revealed information before that date, forcing the announcement forward, and that Calif's chief executive warned people may use AI tools to compare security updates and turn what they find into ready-made attack tools. It stresses that a PHP flaw does not mean every PHP site is compromised or equally exposed.

> ووصف فولكر دوش، مهندس الأمن في المؤسسة غير الربحية المسؤولة عن إدارة مشروع PHP، المشكلة بأنها من أخطر الثغرات التي واجهت المشروع منذ أكثر من عقد

_Curator's translation:_ "Volker Dusch, security engineer at the non-profit foundation that manages the PHP project, described the problem as among the most serious vulnerabilities the project has faced in more than a decade."

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "ثغرة خطيرة في PHP تهدد ملايين المواقع على الإنترنت | عرب نت 5". Selected mechanically, not read by a person.

Capture notes

Language ar. The capture shows no publication date. Secondhand: an Arabic rewrite of a Wall Street Journal report, whose own text is not in the vault. The page's general description of the flaw's memory-handling cause and of a demonstration with a limited number of requests is not copied. The page ends with unrelated headlines and a comment-form challenge. Nothing in the page addresses an AI or hides text from a reader.