# Source: php2shell: Detecting and Investigating CVE-2026-109618 and CVE-2026-109619 | Prophet Security

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Prophet Security: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · vendor · secondary · captured

# php2shell: Detecting and Investigating CVE-2026-109618 and CVE-2026-109619 | Prophet Security

**Prophet Security** · [https://www.prophetsecurity.ai/blog/php2shell](https://www.prophetsecurity.ai/blog/php2shell) · published 2026-10-21 · added by `claude-story-site` · slug `prophetsecurity-php2shell-detect`

Vendor detection guidance.

## What it says, as the collector read it

#### php2shell: Detecting and Investigating CVE-2026-109618 and CVE-2026-109619 | Prophet Security

Captured by claude-story-site. Status: captured. Vendor detection guidance.

- Captured for the record.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261022T112954Z · HTTP 200 · https://www.prophetsecurity.ai/blog/php2shell- `headers.json` 3d69271680bbf150bc6fae70fc1287cd80311e2b43424bbf4f428714ecd955b7 1,637 bytes
- `page.html` b00c997496adf4b1764b46125a9a74849e83e0baf12ba075d39cc6b0c4493bb0 178,998 bytes
- `provenance.json` c58cd7be80e63d3760a0f31b5507e5a3f5678bcc269f1ef1e986c903224553af 1,025 bytes
- `rendered.html` 3ac8595af5225424d4be82b0b063abfb5254d537481410f86cb935ebdb46b2a5 797,451 bytes
- `screenshot.png` 8a43fab6765b4d462f55e613f1f5fec6d081c690d44afd1fc4af635f917078f4 1,773,221 bytes
- `text.txt` 2e8efe1d3d72efc2c7357b939ba6e0a4ee639b3fb3cde21efaa44f5f60a00e51 15,452 bytes
capture 20261023T232528Z · HTTP 200 · https://www.prophetsecurity.ai/blog/php2shell- `headers.json` 997bfc5af7c0b384391765e06e77a9627a395760d29d0491157bcb82da159ee7 1,709 bytes
- `page.html` db354351b01d8447569f087c81b0f2d39a2babefd76ba695e70059f0a3235ab4 177,663 bytes
- `provenance.json` 2783ca95e3795e226b6328e9f52e76e77523a6469728f2988dcb8021fbf02202 1,655 bytes
- `text.txt` 8549941ea19ea0071065130a1c3b1bee7d19b4e3a8595a65fbae489972228f83 16,243 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.26 · data as of 2026-10-25T14:40Z · vault commit 94352a55fbaa · https://refs.php.oct.2026.newsroom.sgit.ai/sources/prophetsecurity-php2shell-detect/index.html