PHP2Shell, alert di ACN: "Aggiornare subito, l'ha fatto solo il 18%"

PHP2Shell, alert di ACN: "Aggiornare subito, l'ha fatto solo il 18%"

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page it/news/cybersecitalia/lalert-dellacn-in-italia-a-rischio-vulnerabilita-oltre-250mi, snapshot 20261026T071149Z. Copied byte for byte; every file's sha256 is in captures/20261026T071149Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

CyberSecItalia (Italian), 25 October, on an alert by Italy's National Cybersecurity Agency (ACN). From CSIRT Italia monitoring, ACN says 81.9% of PHP services with an identified version are potentially vulnerable; four days after the release, of 741,523 PHP services detected, 285,149 ran potentially vulnerable versions, and only about 18% of the Italian entities concerned had updated. ACN urges immediate updates, WAFs in blocking mode where rules exist, and taking services offline absent effective mitigations. The alert also names a further PHP flaw, CVE-2026-115560, with no patch yet; ACN says the fixes already issued for the first two do not resolve it and that the vendor has given a mitigation pending a patch. Exploitation conditions are left out of the notes.

> emerge che l’81,9% dei servizi PHP con versione identificata risulta potenzialmente vulnerabile a PHP2Shell

_Curator's translation:_ "it emerges that 81.9% of PHP services with an identified version are potentially vulnerable to PHP2Shell."

Why it is here

From the promotion queue (index/promote.json, priority 2): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell, alert di ACN: "Aggiornare subito, l'ha fatto solo il 18%"". Selected mechanically, not read by a person. Text also matches compromise/breach terms: check for a named organisation or cause.

Capture notes

Language it-IT. Nothing in the page addresses an AI or hides text from a reader.