Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?

Source · news · secondary · captured

PHP2Shell: DFV warnt Feuerwehren vor kritischen PHP-Sicherheitslücken

Feuerwehr-Magazin · https://www.feuerwehrmagazin.de/nachrichten/dfv-warnt-vor-kritischen-php-sicherheitsluecken-145590 · published 2026-10-21T20:14:17+02:00 · added by curator@php.newsroom · slug feuerwehrmagazin-nachrichten-dfv-warnt-vor-kritischen-php

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Feuerwehr-Magazin (German), 21 October: the German Fire Brigade Association (DFV) warns fire brigades of the critical PHP flaws, CVE-2026-109618 and C...

What it says, as the collector read it

PHP2Shell: DFV warnt Feuerwehren vor kritischen PHP-Sicherheitslücken

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page de/news/feuerwehrmagazin/nachrichten-dfv-warnt-vor-kritischen-php-sicherheitsluecken, snapshot 20261023T160435Z. Copied byte for byte; every file's sha256 is in captures/20261023T160435Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

Feuerwehr-Magazin (German), 21 October: the German Fire Brigade Association (DFV) warns fire brigades of the critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, each 9.2, which can let attackers run their own code remotely on affected servers and read sensitive data without logging in.

> Die unter dem Namen „PHP2Shell“ bekannten Schwachstellen können es Angreifern ermöglichen, ohne vorherige Anmeldung aus der Ferne eigenen Programmcode auf betroffenen Servern auszuführen und sensible Daten auszulesen.

_Curator's translation:_ "The vulnerabilities known as 'PHP2Shell' can allow attackers to run their own program code remotely on affected servers and read sensitive data without prior login."

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell: DFV warnt Feuerwehren vor kritischen PHP-Sicherheitslücken". Selected mechanically, not read by a person.

Capture notes

Language de-DE. Nothing in the page addresses an AI or hides text from a reader.

Claims that cite it

No claim cites this source yet.

Events that cite it

No timeline event cites this source yet.

The bytes

capture 20261023T160435Z · HTTP 200 · https://www.feuerwehrmagazin.de/nachrichten/dfv-warnt-vor-kritischen-php-sicherheitsluecken-145590
  • headers.json 4343e8e3c662d0643f15f711b1187fa0265f4e891e8fa1c793612975b64ac697 527 bytes
  • page.html 73deba67435638699d469df6d93bdbd45f051327bc4952eba809f7b210cdace0 127,618 bytes
  • provenance.json 55232b6e109c589a7a42cb2623ec1f5441f9956f53ffe62ff209f64b5610b28b 1,802 bytes
  • rendered.html 30d772b7c32017ee4cffa1a3d3b6c73b38f943be111861907da31d2a9282cf98 139,803 bytes
  • screenshot.jpg 2279493055c685fe3147312919957eed42388c8bef83c97553cc1c35e21b5c96 552,360 bytes
  • text.txt 2e4bb7c790153416a8a1a414e7b98254ac8c709a828daad75291ec627c9edcd4 6,161 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →