# Source: Atklāta jauna un ļoti specifiskos apstākļos izmantojama PHP ievainojamība, brīdina "Cert.lv"

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Jauns.lv: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# Atklāta jauna un ļoti specifiskos apstākļos izmantojama PHP ievainojamība, brīdina "Cert.lv"

**Jauns.lv** · [https://jauns.lv/raksts/zinas/735243-atklata-jauna-un-loti-specifiskos-apstaklos-izmantojama-php-ievainojamiba-bridina-certlv](https://jauns.lv/raksts/zinas/735243-atklata-jauna-un-loti-specifiskos-apstaklos-izmantojama-php-ievainojamiba-bridina-certlv) · published 2026-10-27T10:32:13.000000Z · added by `curator@php.newsroom` · slug `jauns-raksts-zinas-735243-atklata-jauna-un-lot`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261027T144120Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Jauns.lv (Latvia, Latvian), 27 October: CERT.LV warns that a new PHP vulnerability, discovered on Monday 26 October, can be exploited only in very spe...

## What it says, as the collector read it

#### Atklāta jauna un ļoti specifiskos apstākļos izmantojama PHP ievainojamība, brīdina "Cert.lv"

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `lv/news/jauns/raksts-zinas-735243-atklata-jauna-un-loti-specifiskos-apstak`, snapshot `20261027T144120Z`. Copied byte for byte; every file's sha256 is in `captures/20261027T144120Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Jauns.lv (Latvia, Latvian), 27 October: CERT.LV warns that a new PHP vulnerability, discovered on Monday 26 October, can be exploited only in very specific circumstances with a specific system configuration, so the PHP team plans to publish its patch with the other scheduled updates and no emergency patch is planned. CERT.LV says the two critical PHP2Shell flaws were fixed by the patch of 21 October, that many resource holders suspended or restricted services in advance, that public-sector websites are almost fully restored (the latvija.lv portal and the shared web platform are available from abroad, and most resources were reachable from abroad by Monday evening), and that no successful cyberattacks exploiting the critical flaws have been recorded so far, though attacker activity may rise and tools may improve. Its checks of Latvian cyberspace found about 6,000 potentially vulnerable resources, only a few hundred in the public sector, and it has informed private-sector operators of essential services, critical infrastructure, hosting and telecom providers; it calls the handling process successful and tells operators to check with their system maintainer or developer and not to use downloadable 'diagnostic' tools found online, since attackers use high-profile events to push fake tools. The article's date for the new flaw (26 October) differs from other items that date the PHP project's advisory on the related flaw to 23 October.

> Pagaidām nav konstatēti veiksmīgi kiberuzbrukumi, kuros uzbrucēji būtu izmantojuši kritiskās PHP ievainojamības

_Curator's translation:_ "So far no successful cyberattacks have been recorded in which attackers used the critical PHP vulnerabilities."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Atklāta jauna un ļoti specifiskos apstākļos izmantojama PHP ievainojamība, brīdina "Cert.lv"". Selected mechanically, not read by a person.

#### Capture notes

Language `lv`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261027T144120Z · HTTP 200 · https://jauns.lv/raksts/zinas/735243-atklata-jauna-un-loti-specifiskos-apstaklos-izmantojama-php-ievainojamiba-bridina-certlv- `headers.json` fd79ab8a66754fa6e9c828316226b78a76447b42fdbb8683000246eaf69c3c17 607 bytes
- `page.html` 574ac9db2a2c4cf8808e6f6f15cf6f34f957b073d1302d8510af08ece3a3a4b5 409,183 bytes
- `provenance.json` 045d882a0f9d02527df4d9d9bb608fba2eca8ca3911d80118e0e739eb268b544 1,855 bytes
- `rendered.html` ed3327291a31f57a7dcfbfa4ca3d648e0e35adfa68777c48a91b44273c53c558 415,232 bytes
- `screenshot.jpg` 773cfee26d64626244285b9ad3c17d56a69476c5d56f1899e993123686bc54f2 475,794 bytes
- `text.txt` cccbebec338c99e4268b2265161043d94018e0c24477f60d6973993cdf3a1a66 7,600 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.49 · data as of 2026-10-27T19:13Z · vault commit 6f0d5c50bf12 · https://refs.php.oct.2026.newsroom.sgit.ai/sources/jauns-raksts-zinas-735243-atklata-jauna-un-lot/index.html