# Source: Failles PHP critiques : versions corrigées à installer

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

En cause: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# Failles PHP critiques : versions corrigées à installer

**En cause** · [https://encause.fr/failles-php-critiques-php2shell-mise-a-jour/](https://encause.fr/failles-php-critiques-php2shell-mise-a-jour/) · published 2026-10-25 · added by `curator@php.newsroom` · slug `encause-failles-php-critiques-php2shell-mise-a-j`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261026T071149Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). En cause (French), 25 October, by Arnaud Virel. The capture holds the lead, the table of contents and the first section only (the rest sits behind a '...

## What it says, as the collector read it

#### Failles PHP critiques : versions corrigées à installer

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `fr/news/encause/failles-php-critiques-php2shell-mise-a-jour`, snapshot `20261026T071149Z`. Copied byte for byte; every file's sha256 is in `captures/20261026T071149Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

En cause (French), 25 October, by Arnaud Virel. The capture holds the lead, the table of contents and the first section only (the rest sits behind a 'read more'). The lead says two critical PHP flaws allow remote code execution without authentication under some conditions, that the PHP project, CISA and CERT-EU ask for an immediate update to 8.5.12, 8.4.27, 8.3.36 or 8.2.35, and that CISA had not yet seen successful exploitation at its last update. The contents list a third vulnerability reported on 23 October and a section on no public proof of a successful attack at that hour; that text is not in the capture.

> Le projet PHP, la CISA et le CERT-EU demandent une mise à jour immédiate vers PHP 8.5.12, 8.4.27, 8.3.36 ou 8.2.35.

_Curator's translation:_ "The PHP project, CISA and CERT-EU ask for an immediate update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Failles PHP critiques : versions corrigées à installer". Selected mechanically, not read by a person.

#### Capture notes

Language `fr-FR`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261026T071149Z · HTTP 200 · https://encause.fr/failles-php-critiques-php2shell-mise-a-jour/- `headers.json` 3fe4bc1dbf9cd1e4c1d5dc5ae6c3ce2f667ad1087ea870901592c91cdfe2143f 376 bytes
- `page.html` 3a650735a4b0c9133744deff3e340a68e6c833d5a1e1dd1feae5b121d5e5acba 101,569 bytes
- `provenance.json` 95eab7956a8cf76455e860b2420a44b14f3ab4cfe092f13f770445fa88ec95c9 1,659 bytes
- `rendered.html` 6971e030517f98ccbc99bf3a35d955712f3139596141508cab4ec5f63147eac6 137,383 bytes
- `screenshot.jpg` 5ed4bf59e9a9a6adc8750f2e1dae48eb8597d50fa1d086f3280a87026e9a9616 178,854 bytes
- `text.txt` 1ecd0b24e1d4da884fad35618300be6cd6b1fa6fde1291afd13f4bca9382ee2f 2,054 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.44 · data as of 2026-10-27T00:45Z · vault commit 24f0b0e22666 · https://refs.php.oct.2026.newsroom.sgit.ai/sources/encause-failles-php-critiques-php2shell-mise-a-j/index.html