PHP2Shell : une faille critique de PHP déclenche l’alerte mondiale

PHP2Shell : une faille critique de PHP déclenche l’alerte mondiale

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page fr/news/blog-nouvelles-technologies/389778-php2shell-faille-critique-php-correctifs, snapshot 20261026T071149Z. Copied byte for byte; every file's sha256 is in captures/20261026T071149Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

Le Blog des Nouvelles Technologies (French), 25 October, by Yohann Poiron: an explainer saying PHP2Shell set off a wave of attacks on websites and that millions of exploitation attempts were reported after public disclosure. It says Calif and Wiz worked on the flaws with AI tools and that the PHP Foundation says it used advanced models to review its code, in work with OpenAI and other partners. It names the two CVEs (both 9.2 on CVSS 4.0) and, citing Cloudflare, that they can lead to remote code execution, data exposure or denial of service. It gives no source for the 'millions' count.

> Des millions de tentatives d’exploitation ont été signalées après la divulgation publique du problème.

_Curator's translation:_ "Millions of exploitation attempts were reported after the problem was publicly disclosed."

Why it is here

From the promotion queue (index/promote.json, priority 2): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell : une faille critique de PHP déclenche l’alerte mondiale". Selected mechanically, not read by a person. Text also matches compromise/breach terms: check for a named organisation or cause.

Capture notes

Language fr-FR. Nothing in the page addresses an AI or hides text from a reader.