Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Source · news · secondary · captured
PHP warns it plans to release 2 emergency patches imminently - Ars Technica
Promoted from the source watch (oq9gflln), snapshot 20261023T080331Z, selected by curator@php.newsroom from the 08:30 UTC pass (not from the queue). Dan Goodin, written before the patches shipped: the PHP maintainers announced they would release fixes for two vulnerabilities, both rated 9.2 out of 10, after...
What it says, as the collector read it
PHP warns it plans to release 2 emergency patches imminently - Ars Technica
Promoted by curator@php.newsroom from the source watch (vault oq9gflln), page au/news/arstechnica/security-2026-10-php-maintainers-tell-web-devs-to-prepare-th, snapshot 20261023T080331Z. Copied byte for byte; every file's sha256 is in captures/20261023T080331Z/provenance.json and was re-checked against the watch's own hashes.
What the page says
_Curator's reading of the capture._
Dan Goodin, written before the patches shipped: the PHP maintainers announced they would release fixes for two vulnerabilities, both rated 9.2 out of 10, after purported details leaked. An unconfirmed report showed a video of an exploit tool called PHP2Shell running code on named WordPress, MediaWiki, phpBB, Magento, Joomla, Laravel, Symfony, Drupal and WHMCS versions. watchTowr said it had confirmed CVE-2026-109618 and CVE-2026-109619 are real; Sansec said it expected mass attacks within 15 minutes of the release.
> We reserve the right to release earlier should details of either vulnerability become public, or should evidence of active exploitation appear in the wild.
Why it is here
Not from the promotion queue. The editor asked the curator, in its session on 23 October 2026, to start from the watch's 08:30 UTC pass while the researcher queued it, and approved this batch of fifteen. Selected mechanically: an article page of the watch, snapshot newer than the queue (23 October 02:20 UTC), text that names php2shell or one of the two CVE IDs, URL not already in this vault, English, and naming an organisation or a cause. Nobody has ranked it: if the researcher's queue later lists this URL, it is already here under this slug.
Capture notes
Language en; the text extract is the watch reader's, the page as served is in captures/20261023T080331Z/page.html. Nothing in the page addresses an AI or hides text from a reader.
Claims that cite it
No claim cites this source yet.
Events that cite it
No timeline event cites this source yet.
The bytes
capture 20261023T080331Z · HTTP 200 · https://arstechnica.com/security/2026/10/php-maintainers-tell-web-devs-to-prepare-themselves-for-critical-security-patches/
headers.jsond82ea6774aa7fd97afe368204d1ff2f0d13b71cf17ea85a45d9d417a6bea65aa 823 bytespage.htmlfde5092a336040720599fc85f6c66de19b5a880374ac4b784df6e3749f4200af 146,413 bytesprovenance.json9191e7b89ed24206ef5a45384b0ab5d65cf98a006a5d1542053335ab6992e237 1,776 bytesrendered.html1b7902197bf923479314e247b3146c50b55279e6357d0fb040417de3d58257ea 567,868 bytestext.txt96a800209bd0263f7de25263d9e594d65ca1b53c449993784a99f193831e21ab 5,244 bytes
capture 20261023T160435Z · HTTP 200 · https://arstechnica.com/security/2026/10/php-maintainers-tell-web-devs-to-prepare-themselves-for-critical-security-patches/
headers.json13840bbc0aa9682890b32ae4962783eed7c6e38bf68bb9ed5e781ae99afd5e47 823 bytespage.htmlca33b2d1ef96e80928e8e8ab4f631c94358fb7eee7b800a248aa6a44fe254232 146,512 bytesprovenance.jsonaa85e34dad75bad9917f13c1a251df25f9127086a141bbe8fcc7e95a320e7d1d 2,010 bytesrendered.html742a140357e3dc19cd4484b5493dff5e2e287fa0ce5c1bb2bce09354c116cffc 565,322 bytesscreenshot.jpgaeba250f9d891ef1e07f41c11603009f03bec97db93382a9c946379c8e710d14 342,851 bytestext.txt62681a6a40fd9b229aefd4e838524abff4492b4da3b487a115d2d9b606fbabcc 5,250 bytes
The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →