PHP-Lücke legt Webseiten der MUL-CT und der BTU in Cottbus lahm

PHP-Lücke legt Webseiten der MUL-CT und der BTU in Cottbus lahm

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page de/news/niederlausitz-aktuell/niederlausitz-aktuell-orte-spree-neisse-329774-cottbus-brand, snapshot 20261029T094207Z. Copied byte for byte; every file's sha256 is in captures/20261029T094207Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

A German regional news report (NIEDERLAUSITZ aktuell, 22 October) on websites in Cottbus, Lusatia and Brandenburg that went offline on Wednesday evening after the BSI warning, among them the city of Cottbus, the medical university MUL-CT, the BTU and the state portal brandenburg.de; by Thursday morning many were back, while Cottbus's site was still down while systems were patched and checked, with the city saying no damage had been found. The outlet polled about 110 sites in the region and found most reachable but a number not, without being sure the PHP flaw was the cause for each. It quotes the BSI's level 3 / Orange rating and that no confirmed attacks were known on Wednesday but unconfirmed reports of working attack tools existed, and relays heise that Cloudflare and Amazon report mass attack attempts with no successful attacks reported at first.

> Bestätigte Angriffe waren laut BSI am Mittwoch nicht bekannt, es gebe aber unbestätigte Berichte über funktionierende Angriffswerkzeuge.

_Curator's translation:_ "According to the BSI, no confirmed attacks were known on Wednesday, but there were unconfirmed reports of working attack tools."

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP-Lücke legt Webseiten der MUL-CT und der BTU in Cottbus lahm". Selected mechanically, not read by a person.

Capture notes

Language de. A local outage log; the outlet says it could not confirm the PHP flaw as the cause for each unreachable site. Nothing in the page addresses an AI or hides text from a reader.