# Source: 로그프레소, PHP2Shell 취약점 진단 스캐너 공개 - 데이터넷

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

데이터넷: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# 로그프레소, PHP2Shell 취약점 진단 스캐너 공개 - 데이터넷

**데이터넷** · [https://www.datanet.co.kr/news/articleView.html?idxno=215340](https://www.datanet.co.kr/news/articleView.html?idxno=215340) · published 2026-10-26 · added by `curator@php.newsroom` · slug `datanet-news-articleview-html`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261028T032724Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). A Korean IT-trade piece (Datanet, 26 October) reporting that the security company Logpresso released a free PHP2Shell vulnerability scanner for its SI...

## What it says, as the collector read it

#### 로그프레소, PHP2Shell 취약점 진단 스캐너 공개 - 데이터넷

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `kr/news/datanet/news-articleview-html`, snapshot `20261028T032724Z`. Copied byte for byte; every file's sha256 is in `captures/20261028T032724Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

A Korean IT-trade piece (Datanet, 26 October) reporting that the security company Logpresso released a free PHP2Shell vulnerability scanner for its SIEM and XDR customers, following an advisory it posted on 21 October. It repeats that the PHP security team released patches on 21 October for supported PHP 8.2 to 8.5, that reports put versions since 5.4.0 in scope, and that whether a system is actually patched depends on the operating system distribution and device vendor advisories as well as the PHP version number. Logpresso stresses that a vulnerability scan does not show past compromise, and that internal assets as well as internet-facing ones should be checked.

> 취약점 진단과 침해 여부 확인은 구분해야 한다.

_Curator's translation:_ "Vulnerability scanning and checking for compromise must be kept separate."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "로그프레소, PHP2Shell 취약점 진단 스캐너 공개 - 데이터넷". Selected mechanically, not read by a person.

#### Capture notes

Language `ko`. A vendor product announcement relayed by the press. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261028T032724Z · HTTP 200 · https://www.datanet.co.kr/news/articleView.html?idxno=215340- `headers.json` 44b3fcfeae657fc9cc9b1bdaada964e32ff2dbe90e347a09889d731574cd48a0 323 bytes
- `page.html` 9e7a655a365c5a6d39000d273485b5a66b6a952fb3a48e3ce9db2e1de75ba458 145,566 bytes
- `provenance.json` 58d1dfa4de0596420e96f5610c570c70458acd93d64688425e361a4387d87d4a 1,609 bytes
- `rendered.html` 7f9501ef661307bd3df4a93f80f7008d870a41a060635ac765e27c01bd87bea6 168,901 bytes
- `screenshot.jpg` c42babd0bab845545686abbe397c56cc0b5bba71c7a14bdd7575b5dd7fd364c7 499,823 bytes
- `text.txt` 8c32048249ee94ca298dec9d44055c489aa7e500d94885636e3401d733f47549 9,266 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.51 · data as of 2026-10-28T17:15Z · vault commit 75668aedfb6d · https://refs.php.oct.2026.newsroom.sgit.ai/sources/datanet-news-articleview-html/index.html