# Source: PHP2Shell : une faille critique de PHP déclenche l’alerte mondiale

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

le Blog des Nouvelles Technologies: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# PHP2Shell : une faille critique de PHP déclenche l’alerte mondiale

**le Blog des Nouvelles Technologies** · [https://www.blog-nouvelles-technologies.fr/389778/php2shell-faille-critique-php-correctifs/](https://www.blog-nouvelles-technologies.fr/389778/php2shell-faille-critique-php-correctifs/) · published 2026-10-25T09:20:00+01:00 · added by `curator@php.newsroom` · slug `blog-nouvelles-technologies-389778-php2shell-faille-critique-php-cor`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261026T071149Z, queue priority 2 (mechanical selection by researcher@php.newsroom, read by the curator). Le Blog des Nouvelles Technologies (French), 25 October, by Yohann Poiron: an explainer saying PHP2Shell set off a wave of attacks on websites and tha...

## What it says, as the collector read it

#### PHP2Shell : une faille critique de PHP déclenche l’alerte mondiale

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `fr/news/blog-nouvelles-technologies/389778-php2shell-faille-critique-php-correctifs`, snapshot `20261026T071149Z`. Copied byte for byte; every file's sha256 is in `captures/20261026T071149Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Le Blog des Nouvelles Technologies (French), 25 October, by Yohann Poiron: an explainer saying PHP2Shell set off a wave of attacks on websites and that millions of exploitation attempts were reported after public disclosure. It says Calif and Wiz worked on the flaws with AI tools and that the PHP Foundation says it used advanced models to review its code, in work with OpenAI and other partners. It names the two CVEs (both 9.2 on CVSS 4.0) and, citing Cloudflare, that they can lead to remote code execution, data exposure or denial of service. It gives no source for the 'millions' count.

> Des millions de tentatives d’exploitation ont été signalées après la divulgation publique du problème.

_Curator's translation:_ "Millions of exploitation attempts were reported after the problem was publicly disclosed."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 2): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell : une faille critique de PHP déclenche l’alerte mondiale". Selected mechanically, not read by a person. Text also matches compromise/breach terms: check for a named organisation or cause.

#### Capture notes

Language `fr-FR`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261026T071149Z · HTTP 200 · https://www.blog-nouvelles-technologies.fr/389778/php2shell-faille-critique-php-correctifs/- `headers.json` fd9a653888616bc12a9ad4b75860a30f5f242dbd497ee71982c7fa3dec11b4a7 1,770 bytes
- `page.html` d20daa73b3cb93ca61a59c5bf97411d0bd947e38188695fff4478dc28a17d5ba 316,687 bytes
- `provenance.json` efa4f0a56bfc8430ca4a9c5a7d4ee1fa6cf782c2683e66f1651d2ad6cc7ef93c 1,796 bytes
- `rendered.html` 68d345aa7ff877f4fe939da97cb62097a4cc2dd392d2d29bbd68a0459aa529ba 1,108,599 bytes
- `screenshot.jpg` 5907db3ccb1a486d4c7e0ce88d87f79852054fa0b2b108dfb75e9b2f8bcb50a9 642,950 bytes
- `text.txt` 65f30d3a9ba0e5491a8dcdbd5ee3260abea69d8d50f0442ff21a3a6a0b28c097 10,452 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.36 · data as of 2026-10-26T17:09Z · vault commit 1dceaa1dfa7f · https://refs.php.oct.2026.newsroom.sgit.ai/sources/blog-nouvelles-technologies-389778-php2shell-faille-critique-php-cor/index.html