# Source: PHP2Shell: DFV warnt Feuerwehren vor kritischen PHP-Sicherheitslücken

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Feuerwehr-Magazin: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# PHP2Shell: DFV warnt Feuerwehren vor kritischen PHP-Sicherheitslücken

**Feuerwehr-Magazin** · [https://www.feuerwehrmagazin.de/nachrichten/dfv-warnt-vor-kritischen-php-sicherheitsluecken-145590](https://www.feuerwehrmagazin.de/nachrichten/dfv-warnt-vor-kritischen-php-sicherheitsluecken-145590) · published 2026-10-21T20:14:17+02:00 · added by `curator@php.newsroom` · slug `feuerwehrmagazin-nachrichten-dfv-warnt-vor-kritischen-php`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Feuerwehr-Magazin (German), 21 October: the German Fire Brigade Association (DFV) warns fire brigades of the critical PHP flaws, CVE-2026-109618 and C...

## What it says, as the collector read it

#### PHP2Shell: DFV warnt Feuerwehren vor kritischen PHP-Sicherheitslücken

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `de/news/feuerwehrmagazin/nachrichten-dfv-warnt-vor-kritischen-php-sicherheitsluecken`, snapshot `20261023T160435Z`. Copied byte for byte; every file's sha256 is in `captures/20261023T160435Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Feuerwehr-Magazin (German), 21 October: the German Fire Brigade Association (DFV) warns fire brigades of the critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, each 9.2, which can let attackers run their own code remotely on affected servers and read sensitive data without logging in.

> Die unter dem Namen „PHP2Shell“ bekannten Schwachstellen können es Angreifern ermöglichen, ohne vorherige Anmeldung aus der Ferne eigenen Programmcode auf betroffenen Servern auszuführen und sensible Daten auszulesen.

_Curator's translation:_ "The vulnerabilities known as 'PHP2Shell' can allow attackers to run their own program code remotely on affected servers and read sensitive data without prior login."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell: DFV warnt Feuerwehren vor kritischen PHP-Sicherheitslücken". Selected mechanically, not read by a person.

#### Capture notes

Language `de-DE`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261023T160435Z · HTTP 200 · https://www.feuerwehrmagazin.de/nachrichten/dfv-warnt-vor-kritischen-php-sicherheitsluecken-145590- `headers.json` 4343e8e3c662d0643f15f711b1187fa0265f4e891e8fa1c793612975b64ac697 527 bytes
- `page.html` 73deba67435638699d469df6d93bdbd45f051327bc4952eba809f7b210cdace0 127,618 bytes
- `provenance.json` 55232b6e109c589a7a42cb2623ec1f5441f9956f53ffe62ff209f64b5610b28b 1,802 bytes
- `rendered.html` 30d772b7c32017ee4cffa1a3d3b6c73b38f943be111861907da31d2a9282cf98 139,803 bytes
- `screenshot.jpg` 2279493055c685fe3147312919957eed42388c8bef83c97553cc1c35e21b5c96 552,360 bytes
- `text.txt` 2e4bb7c790153416a8a1a414e7b98254ac8c709a828daad75291ec627c9edcd4 6,161 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.26 · data as of 2026-10-25T14:40Z · vault commit 94352a55fbaa · https://refs.php.oct.2026.newsroom.sgit.ai/sources/feuerwehrmagazin-nachrichten-dfv-warnt-vor-kritischen-php/index.html