# Source: PHP2Shell: el fallo crítico de PHP hallado con IA

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

LISA News: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# PHP2Shell: el fallo crítico de PHP hallado con IA

**LISA News** · [https://www.lisanews.org/internacional/un-fallo-en-php-detectado-con-ia-expone-hasta-el-70-de-las-webs-del-mundo/](https://www.lisanews.org/internacional/un-fallo-en-php-detectado-con-ia-expone-hasta-el-70-de-las-webs-del-mundo/) · published 2026-10-22T08:18:18+00:00 · added by `curator@php.newsroom` · slug `lisanews-internacional-un-fallo-en-php-detectado`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261025T120459Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). LISA News (Spanish), 22 October: PHP2Shell, the critical PHP flaw found with AI. PHP's makers announced a critical flaw on Wednesday 21 October that e...

## What it says, as the collector read it

#### PHP2Shell: el fallo crítico de PHP hallado con IA

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `es/news/lisanews/internacional-un-fallo-en-php-detectado-con-ia-expone-hasta`, snapshot `20261025T120459Z`. Copied byte for byte; every file's sha256 is in `captures/20261025T120459Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

LISA News (Spanish), 22 October: PHP2Shell, the critical PHP flaw found with AI. PHP's makers announced a critical flaw on Wednesday 21 October that experts compare to Heartbleed; it relates to how PHP manages memory. It names Ryan Austin of Calif as having found it with OpenAI's GPT-5.6 Sol during an August audit of PHP's code that OpenAI financed within an initiative of AI companies to help open-source projects. The curator did not record the page's description of how quickly the attack could be run.

> Ryan Austin, investigador de la empresa de seguridad Calif, lo encontró con GPT-5.6 Sol, un modelo avanzado de OpenAI, durante una auditoría del código de PHP en agosto, financiada por OpenAI dentro de una iniciativa de empresas de IA para ayudar a proyectos de código abierto.

_Curator's translation:_ "Ryan Austin, a researcher at the security firm Calif, found it with GPT-5.6 Sol, an advanced OpenAI model, during an August audit of PHP's code, financed by OpenAI within an initiative of AI companies to help open-source projects."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell: el fallo crítico de PHP hallado con IA". Selected mechanically, not read by a person.

#### Capture notes

Language `es`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261025T120459Z · HTTP 200 · https://www.lisanews.org/internacional/un-fallo-en-php-detectado-con-ia-expone-hasta-el-70-de-las-webs-del-mundo/- `headers.json` d3d4bcdb3965b08bd35f5acc94bed646b8fb61ecf8b46dd912ca54132cb4ae0d 686 bytes
- `page.html` 62987245a8313e619860136d525a196b836b1c878b51c911731ead962bc9939c 673,223 bytes
- `provenance.json` 40b52d4f6ea17bf3898441ada272c7d93391c679194ef971294d8991c66b92a3 1,787 bytes
- `rendered.html` f94802221e1d25b7cacc26d5bf252f8457b88a41419a2674ba2eb7d5a276b26d 700,070 bytes
- `screenshot.jpg` 74ec1ea328183ffbbf1ffbd67e304171333d6dc1696a33ab92474f5c0b501ef8 725,329 bytes
- `text.txt` 28c2321adc32ccdd2a2937d66f2a49d747f5455a93fff446da9a9a887e11a1da 10,637 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.26 · data as of 2026-10-25T14:40Z · vault commit 94352a55fbaa · https://refs.php.oct.2026.newsroom.sgit.ai/sources/lisanews-internacional-un-fallo-en-php-detectado/index.html