Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Source · news · secondary · captured
PHP güvenlik açığı alarmı! İki kritik açık bulundu: PHP nedir, ne işe yarar? - TREND
Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Mynet / Trend (Turkish): PHP security alarm, two critical flaws found; what PHP is and what it does. The two flaws, named PHP2Shell, may let attackers...
What it says, as the collector read it
PHP güvenlik açığı alarmı! İki kritik açık bulundu: PHP nedir, ne işe yarar? - TREND
Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page tr/news/mynet/php-guvenlik-acigi-alarmi-iki-kritik-acik-bulundu-php-nedir, snapshot 20261023T160435Z. Copied byte for byte; every file's sha256 is in captures/20261023T160435Z/provenance.json and was re-checked against the watch's own hashes.
What the page says
_Curator's reading of the capture._
Mynet / Trend (Turkish): PHP security alarm, two critical flaws found; what PHP is and what it does. The two flaws, named PHP2Shell, may let attackers run code without authorisation on servers under certain conditions; each is rated 9.2 on CVSS v4.0; the PHP developers released the fixes on 21 October.
> CVE-2026-109618 ve CVE-2026-109619 kodlarıyla tanımlanan güvenlik açıklarının her biri, CVSS v4.0 değerlendirme sisteminde 10 üzerinden 9,2 önem derecesine sahip.
_Curator's translation:_ "The vulnerabilities identified by the codes CVE-2026-109618 and CVE-2026-109619 each have a severity of 9.2 out of 10 on the CVSS v4.0 scoring system."
_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ Mynet explainer on what PHP is and what PHP2Shell does, based on the official advisory. It notes that Turkey's Cyber Security Presidency activated national preventive measures.
Why it is here
From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP güvenlik açığı alarmı! İki kritik açık bulundu: PHP nedir, ne işe yarar? - TREND". Selected mechanically, not read by a person.
Capture notes
Language tr. Nothing in the page addresses an AI or hides text from a reader.
Claims that cite it
No claim cites this source yet.
Events that cite it
No timeline event cites this source yet.
The bytes
capture 20261023T160435Z · HTTP 200 · https://www.mynet.com/php-guvenlik-acigi-alarmi-iki-kritik-acik-bulundu-php-nedir-ne-ise-yarar-190101302483
headers.json2ba13f4cc0e6ecc51e2b3c9279fe083ac9198d9c969ddc313d76656239d619ff 765 bytespage.html0225305288ac670a973acd5e47b7b0d8c2135c7a36266648795c9a45d3205a34 151,189 bytesprovenance.json19dd8cd3cff169c8bf7ffc6efc92ad1e3aea748b51b20c1df635f3295ba0c3b0 1,664 bytestext.txt526ad8cca6bc26bb43d83c72029e335adf3b6fe69a95ba2af3280736b9c4399e 15,701 bytes
The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →