# Source: PHP2Shell: IA descubre falla crítica que amenaza al 75% de la web – Publimetro Chile

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Publimetro: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# PHP2Shell: IA descubre falla crítica que amenaza al 75% de la web – Publimetro Chile

**Publimetro** · [https://www.publimetro.cl/tecnologia/2026/10/22/php2shell-ia-descubre-falla-critica-que-amenaza-al-75-de-la-web/](https://www.publimetro.cl/tecnologia/2026/10/22/php2shell-ia-descubre-falla-critica-que-amenaza-al-75-de-la-web/) · published 2026-10-21 · added by `curator@php.newsroom` · slug `publimetro-tecnologia-2026-10-22-php2shell-ia-descu`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261103T121630Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). A Chilean news explainer (Publimetro Chile, published 21 October local time) that two critical flaws hidden for over a decade in PHP's code were detec...

## What it says, as the collector read it

#### PHP2Shell: IA descubre falla crítica que amenaza al 75% de la web – Publimetro Chile

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `cl/news/publimetro/tecnologia-2026-10-22-php2shell-ia-descubre-falla-critica-qu`, snapshot `20261103T121630Z`. Copied byte for byte; every file's sha256 is in `captures/20261103T121630Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

A Chilean news explainer (Publimetro Chile, published 21 October local time) that two critical flaws hidden for over a decade in PHP's code were detected with advanced AI from OpenAI and Wiz. It puts PHP at about 75% of sites whose technology is identifiable, relays the Wall Street Journal and Wiz on how the engine mishandles memory on fatal errors, says Calif used GPT-5.6 Sol to analyse PHP's source and Wiz detected the flaw independently, that OpenAI's Patch the Planet programme brought PHP developers, independent experts and infrastructure providers together for two months to patch before disclosure, that AI accelerated the proofs of concept from weeks to hours, and that the same capabilities could let malicious actors automate attack tools.

> La IA no solo fue determinante en la identificación del error, sino también en la aceleración de las pruebas de concepto.

_Curator's translation:_ "AI was decisive not only in identifying the flaw but also in speeding up the proofs of concept."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell: IA descubre falla crítica que amenaza al 75% de la web – Publimetro Chile". Selected mechanically, not read by a person.

#### Capture notes

Language `es`. General-audience explainer; the page's table of the two CVEs overstates their version scope as 'from 5.4 to current'. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261103T121630Z · HTTP 200 · https://www.publimetro.cl/tecnologia/2026/10/22/php2shell-ia-descubre-falla-critica-que-amenaza-al-75-de-la-web/- `headers.json` bcbf72c02e4f531b915bffb07b5ec3c52dc7d5b0d0d69ea35aa3abd10650ba14 2,309 bytes
- `page.html` 0a6b13fdd00f5015c79dcc44f6ace0ed4c891cbf48ab4dfb4b0743a97bbc4d52 432,111 bytes
- `provenance.json` c50e35ee61428055ed4703550e16a45bcb203ca14d4e9e3d7b7bac33968cd9fe 1,831 bytes
- `rendered.html` 2f3f0601bb6b0cb81350d6d10c3512bda0cf05ee6fd0332085e16938c12d6307 570,051 bytes
- `screenshot.jpg` b21c5c28d2f3cb00e03e58432c05b9751fef487344970f4540f465a8fc0a72a7 728,504 bytes
- `text.txt` f511383b2be3a3f47e73fa830edf67f4c165967f650236362661e4e30618c60e 7,467 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.58 · data as of 2026-11-03T12:16Z · vault commit a8e4e3dc5490 · https://refs.php.oct.2026.newsroom.sgit.ai/sources/publimetro-tecnologia-2026-10-22-php2shell-ia-descu/index.html