# Source: ثغرة خطيرة في PHP تهدد ملايين المواقع على الإنترنت | عرب نت 5

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

عرب نت 5: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# ثغرة خطيرة في PHP تهدد ملايين المواقع على الإنترنت | عرب نت 5

**عرب نت 5** · [https://www.arabnet5.com/news/%D8%AB%D8%BA%D8%B1%D8%A9-%D8%AE%D8%B7%D9%8A%D8%B1%D8%A9-%D9%81%D9%8A-php-%D8%AA%D9%87%D8%AF%D8%AF-%D9%85%D9%84%D8%A7%D9%8A%D9%8A%D9%86-%D8%A7%D9%84%D9%85%D9%88%D8%A7%D9%82%D8%B9-%D8%B9%D9%84%D9%89-%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA-590091](https://www.arabnet5.com/news/%D8%AB%D8%BA%D8%B1%D8%A9-%D8%AE%D8%B7%D9%8A%D8%B1%D8%A9-%D9%81%D9%8A-php-%D8%AA%D9%87%D8%AF%D8%AF-%D9%85%D9%84%D8%A7%D9%8A%D9%8A%D9%86-%D8%A7%D9%84%D9%85%D9%88%D8%A7%D9%82%D8%B9-%D8%B9%D9%84%D9%89-%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA-590091) · published not stated in the capture · added by `curator@php.newsroom` · slug `arabnet5-news-d8-ab-d8-ba-d8-b1-d8-a9-d8-ae-d8-b7`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261030T071422Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). An Egyptian general-news site (Arab Net 5) retells, in Arabic, a Wall Street Journal report on PHP2Shell. It says a Calif researcher found the flaw in...

## What it says, as the collector read it

#### ثغرة خطيرة في PHP تهدد ملايين المواقع على الإنترنت | عرب نت 5

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `sa/news/arabnet5/news-d8-ab-d8-ba-d8-b1-d8-a9-d8-ae-d8-b7-d9-8a-d8-b1-d8-a9-d`, snapshot `20261030T071422Z`. Copied byte for byte; every file's sha256 is in `captures/20261030T071422Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

An Egyptian general-news site (Arab Net 5) retells, in Arabic, a Wall Street Journal report on PHP2Shell. It says a Calif researcher found the flaw in August while reviewing PHP's source code with OpenAI's GPT-5.6 Sol under an OpenAI-backed programme for open-source projects, that Calif's chief executive contacted the PHP project's security engineer on 11 August, that Wiz's team independently found the flaw and its co-founder called it the most serious found with AI help up to then, that the PHP Foundation's security engineer called it among the most serious flaws the project had faced in over a decade and compared it to Heartbleed, that the team planned to release the fix on 22 October with details kept secret but a post on the Hacker News site revealed information before that date, forcing the announcement forward, and that Calif's chief executive warned people may use AI tools to compare security updates and turn what they find into ready-made attack tools. It stresses that a PHP flaw does not mean every PHP site is compromised or equally exposed.

> ووصف فولكر دوش، مهندس الأمن في المؤسسة غير الربحية المسؤولة عن إدارة مشروع PHP، المشكلة بأنها من أخطر الثغرات التي واجهت المشروع منذ أكثر من عقد

_Curator's translation:_ "Volker Dusch, security engineer at the non-profit foundation that manages the PHP project, described the problem as among the most serious vulnerabilities the project has faced in more than a decade."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "ثغرة خطيرة في PHP تهدد ملايين المواقع على الإنترنت | عرب نت 5". Selected mechanically, not read by a person.

#### Capture notes

Language `ar`. The capture shows no publication date. Secondhand: an Arabic rewrite of a Wall Street Journal report, whose own text is not in the vault. The page's general description of the flaw's memory-handling cause and of a demonstration with a limited number of requests is not copied. The page ends with unrelated headlines and a comment-form challenge. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261030T071422Z · HTTP 200 · https://www.arabnet5.com/news/%D8%AB%D8%BA%D8%B1%D8%A9-%D8%AE%D8%B7%D9%8A%D8%B1%D8%A9-%D9%81%D9%8A-php-%D8%AA%D9%87%D8%AF%D8%AF-%D9%85%D9%84%D8%A7%D9%8A%D9%8A%D9%86-%D8%A7%D9%84%D9%85%D9%88%D8%A7%D9%82%D8%B9-%D8%B9%D9%84%D9%89-%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA-590091- `headers.json` 5fe0ef7d7298bafbdc47f9cca9cebbae4d45d741074b9ea4edc679864c0f632d 1,119 bytes
- `page.html` 89c21993c57d40e922e9d6430488f0328913c824b13bc46550894c5738bf313b 101,109 bytes
- `provenance.json` 99d75824be39eb495845c0c3f6a7416c5fd6bf4ffb0402e5127f99c9fe585205 2,183 bytes
- `rendered.html` 895d162e22546715a214df7677f3fc44261126178e23377c865089b7166b5cc1 122,452 bytes
- `screenshot.jpg` 547359f479fab97bcc717323bb632eea4333f6a05c8726361140754ccf452391 78,083 bytes
- `text.txt` 10fdd5c340767f530cc740258d61b133e67a8e93cf88cf9b12f2506cfb5d617e 18,219 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.55 · data as of 2026-10-30T17:13Z · vault commit 2f80607e87ad · https://refs.php.oct.2026.newsroom.sgit.ai/sources/arabnet5-news-d8-ab-d8-ba-d8-b1-d8-a9-d8-ae-d8-b7/index.html