ثغرتان حرجتان في لغة بي إتش بي تدفعان حكومات ومؤسسات إلى إغلاق مواقعها: ما هي PHP2Shell وماذا تعني للمستخدم العادي؟

ثغرتان حرجتان في لغة بي إتش بي تدفعان حكومات ومؤسسات إلى إغلاق مواقعها: ما هي PHP2Shell وماذا تعني للمستخدم العادي؟

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page sa/news/ra2ej/php2shell-893716-html, snapshot 20261023T160435Z. Copied byte for byte; every file's sha256 is in captures/20261023T160435Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

Raij (Arabic), an explainer on PHP2Shell for ordinary users. It says, citing Reuters, that the White House said it learned of the vulnerability on Friday 16 October 2026; that accounts of the discovery differ: OpenAI says it led a collaboration to prepare fixes before disclosure, Calif says it found the flaws with a large language model on 1 August, Wiz says it found them independently with Wiz Atlas, Gemini 4 Argon and GPT-5.6 Sol and that they stayed undiscovered for over a decade; that Amazon Threat Intelligence recorded an attempt on a honeypot on 17 October, four days before the announcement, from an anonymous address, with further attempts on disclosure day from varied infrastructure pointing to multiple actors; that watchTowr's head of threat intelligence, Jake Knott, told CNET attempts were being seen but 'no one has succeeded so far'; and warnings, quoted from The Guardian, of a long-lasting problem and wide automated exploitation. The piece ends that ordinary users face no direct risk but may see outages and scams.

> وقال البيت الأبيض إنه علم بالثغرة يوم الجمعة 16 أكتوبر 2026.

_Curator's translation:_ "The White House said it learned of the vulnerability on Friday 16 October 2026."

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "ثغرتان حرجتان في لغة بي إتش بي تدفعان حكومات ومؤسسات إلى إغلاق مواقعها: ما هي PHP2Shell وماذا تعني للمستخدم العادي؟". Selected mechanically, not read by a person.

Capture notes

Language ar. Nothing in the page addresses an AI or hides text from a reader.