# Source: PHP2Shell 波及数百万台服务器，所用 PHP 版本无官方修复补丁 - Notebookcheck-cn.com News

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

notebookcheck-cn: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# PHP2Shell 波及数百万台服务器，所用 PHP 版本无官方修复补丁 - Notebookcheck-cn.com News

**notebookcheck-cn** · [https://www.notebookcheck-cn.com/PHP2Shell-PHP.1433819.0.html](https://www.notebookcheck-cn.com/PHP2Shell-PHP.1433819.0.html) · published 2026-10-26 · added by `curator@php.newsroom` · slug `notebookcheck-cn-php2shell-php-1433819-0-html`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261026T094033Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Notebookcheck China edition (Chinese, DeepL translation of Darryl Linington's article), 26 October: the same article recorded in French as notebookche...

## What it says, as the collector read it

#### PHP2Shell 波及数百万台服务器，所用 PHP 版本无官方修复补丁 - Notebookcheck-cn.com News

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `hk/news/notebookcheck-cn/php2shell-php-1433819-0-html`, snapshot `20261026T094033Z`. Copied byte for byte; every file's sha256 is in `captures/20261026T094033Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Notebookcheck China edition (Chinese, DeepL translation of Darryl Linington's article), 26 October: the same article recorded in French as notebookcheck-php2shell-laisse-des-millions-de-serveur (Shodan counts of about 884,000 exposed hosts on unsupported PHP, banner-based; minimal backports only for 7.4, 8.0 and 8.1; version strings can mislead; CISA advice to take unpatched PHP systems offline). The claims are recorded on the French edition.

> PHP2Shell 的修复仅覆盖 PHP 8.2 至 8.5，这意味着大量面向互联网的 PHP 主机所运行的版本从未获得包含修复的官方发行版。

_Curator's translation:_ "The PHP2Shell fixes cover only PHP 8.2 to 8.5, which means a large number of internet-facing PHP hosts run versions that never received an official fix release."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell 波及数百万台服务器，所用 PHP 版本无官方修复补丁 - Notebookcheck-cn.com News". Selected mechanically, not read by a person.

#### Capture notes

Language `cn`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261026T094033Z · HTTP 200 · https://www.notebookcheck-cn.com/PHP2Shell-PHP.1433819.0.html- `headers.json` 8f10e4c35946cd0b2212286160701084c7b8e245612c08d07baf17d052e79ecf 983 bytes
- `page.html` bdd1e960e6bd4b32572c1f15188d9af84422bec1d68a1301fd16256561c0faea 105,695 bytes
- `provenance.json` 255ee9a1e5f7756842bb57e442f43afe7f253901c9699b218cee21bfa3512e8f 1,690 bytes
- `rendered.html` b40ef69529e009f370e7627db019b6ffccbd24882b574efe1caa101c5f80c98e 116,097 bytes
- `screenshot.jpg` 93ca2731d4ac0e5a9382e5d121c6098494bef0894ecbdf8ccf6a0361e6ef3061 315,425 bytes
- `text.txt` fd81eb1c26ed745aeb4359a460f2818de48e0b21fc6ae026047042ff79a409ee 5,726 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.36 · data as of 2026-10-26T17:09Z · vault commit 1dceaa1dfa7f · https://refs.php.oct.2026.newsroom.sgit.ai/sources/notebookcheck-cn-php2shell-php-1433819-0-html/index.html