# Source: Schwachstelle „PHP2Shell“ - FALTER

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Falter: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# Schwachstelle „PHP2Shell“ - FALTER

**Falter** · [https://www.falter.at/zeitung/20261027/schwachstelle-php2shell](https://www.falter.at/zeitung/20261027/schwachstelle-php2shell) · published 2026-10-27 · added by `curator@php.newsroom` · slug `falter-zeitung-20261027-schwachstelle-php2shell`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261028T071103Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). A short German-language print-edition teaser from the Austrian weekly Falter (27 October): PHP2Shell is the name for two critical flaws in the widely...

## What it says, as the collector read it

#### Schwachstelle „PHP2Shell“ - FALTER

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `at/news/falter/zeitung-20261027-schwachstelle-php2shell`, snapshot `20261028T071103Z`. Copied byte for byte; every file's sha256 is in `captures/20261028T071103Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

A short German-language print-edition teaser from the Austrian weekly Falter (27 October): PHP2Shell is the name for two critical flaws in the widely used PHP language, which last week led to numerous websites being taken offline as a precaution; the article says both holes have since been closed by updates. The page is a few lines inside a listing of arts items.

> Mittlerweile konnten die beiden Sicherheitslöcher mittels Updates gestopft werden.

_Curator's translation:_ "By now the two security holes have been plugged with updates."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Schwachstelle „PHP2Shell“ - FALTER". Selected mechanically, not read by a person.

#### Capture notes

Language `de-AT`. A teaser of a few lines among unrelated arts listings; the full piece is not on the page. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261028T071103Z · HTTP 200 · https://www.falter.at/zeitung/20261027/schwachstelle-php2shell- `headers.json` 2abfa829bb8c5013da8520bde242f5477623d8b82e2ad2721d9c2ad345598e09 1,584 bytes
- `page.html` fe10fd4bdcf212e6064df3bd22ca5b4390fbc24a45e100b520f62bbe8d203c53 176,667 bytes
- `provenance.json` adcf2de7af6707bc20d562f474c4c165d4896824511b992b7ce9c489534cfc88 1,630 bytes
- `rendered.html` 72ef21989b90e783652ec04405ad8f751f4685bfbf97498be1f387eff49fe8e8 160,268 bytes
- `screenshot.jpg` c48ae05dd6b8fab34e639b19085cbdcec54312bc1ac0e2317c64bc03a6d4c77e 191,629 bytes
- `text.txt` 8ddd1abe9c16d42e7c989c2eef57402559a493929e2a4657dcf4585360a9cdc3 3,561 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.51 · data as of 2026-10-28T17:15Z · vault commit 75668aedfb6d · https://refs.php.oct.2026.newsroom.sgit.ai/sources/falter-zeitung-20261027-schwachstelle-php2shell/index.html