# Source: ثغرتان حرجتان في لغة بي إتش بي تدفعان حكومات ومؤسسات إلى إغلاق مواقعها: ما هي PHP2Shell وماذا تعني للمستخدم العادي؟

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

رائج: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# ثغرتان حرجتان في لغة بي إتش بي تدفعان حكومات ومؤسسات إلى إغلاق مواقعها: ما هي PHP2Shell وماذا تعني للمستخدم العادي؟

**رائج** · [https://www.ra2ej.com/ثغرتان-حرجتان-في-لغة-بي-إتش-بي-تدفعان-حكومات-ومؤسسات-إلى-إغلاق-مواقعها-ما-هي-php2shell-وماذا-تعني-للمستخدم-العادي؟-893716.html](https://www.ra2ej.com/ثغرتان-حرجتان-في-لغة-بي-إتش-بي-تدفعان-حكومات-ومؤسسات-إلى-إغلاق-مواقعها-ما-هي-php2shell-وماذا-تعني-للمستخدم-العادي؟-893716.html) · published not stated in the capture · added by `curator@php.newsroom` · slug `ra2ej-php2shell-893716-html`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Raij (Arabic), an explainer on PHP2Shell for ordinary users. It says, citing Reuters, that the White House said it learned of the vulnerability on Fri...

## What it says, as the collector read it

#### ثغرتان حرجتان في لغة بي إتش بي تدفعان حكومات ومؤسسات إلى إغلاق مواقعها: ما هي PHP2Shell وماذا تعني للمستخدم العادي؟

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `sa/news/ra2ej/php2shell-893716-html`, snapshot `20261023T160435Z`. Copied byte for byte; every file's sha256 is in `captures/20261023T160435Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Raij (Arabic), an explainer on PHP2Shell for ordinary users. It says, citing Reuters, that the White House said it learned of the vulnerability on Friday 16 October 2026; that accounts of the discovery differ: OpenAI says it led a collaboration to prepare fixes before disclosure, Calif says it found the flaws with a large language model on 1 August, Wiz says it found them independently with Wiz Atlas, Gemini 4 Argon and GPT-5.6 Sol and that they stayed undiscovered for over a decade; that Amazon Threat Intelligence recorded an attempt on a honeypot on 17 October, four days before the announcement, from an anonymous address, with further attempts on disclosure day from varied infrastructure pointing to multiple actors; that watchTowr's head of threat intelligence, Jake Knott, told CNET attempts were being seen but 'no one has succeeded so far'; and warnings, quoted from The Guardian, of a long-lasting problem and wide automated exploitation. The piece ends that ordinary users face no direct risk but may see outages and scams.

> وقال البيت الأبيض إنه علم بالثغرة يوم الجمعة 16 أكتوبر 2026.

_Curator's translation:_ "The White House said it learned of the vulnerability on Friday 16 October 2026."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "ثغرتان حرجتان في لغة بي إتش بي تدفعان حكومات ومؤسسات إلى إغلاق مواقعها: ما هي PHP2Shell وماذا تعني للمستخدم العادي؟". Selected mechanically, not read by a person.

#### Capture notes

Language `ar`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261023T160435Z · HTTP 200 · https://www.ra2ej.com/%D8%AB%D8%BA%D8%B1%D8%AA%D8%A7%D9%86-%D8%AD%D8%B1%D8%AC%D8%AA%D8%A7%D9%86-%D9%81%D9%8A-%D9%84%D8%BA%D8%A9-%D8%A8%D9%8A-%D8%A5%D8%AA%D8%B4-%D8%A8%D9%8A-%D8%AA%D8%AF%D9%81%D8%B9%D8%A7%D9%86-%D8%AD%D9%83%D9%88%D9%85%D8%A7%D8%AA-%D9%88%D9%85%D8%A4%D8%B3%D8%B3%D8%A7%D8%AA-%D8%A5%D9%84%D9%89-%D8%A5%D8%BA%D9%84%D8%A7%D9%82-%D9%85%D9%88%D8%A7%D9%82%D8%B9%D9%87%D8%A7-%D9%85%D8%A7-%D9%87%D9%8A-php2shell-%D9%88%D9%85%D8%A7%D8%B0%D8%A7-%D8%AA%D8%B9%D9%86%D9%8A-%D9%84%D9%84%D9%85%D8%B3%D8%AA%D8%AE%D8%AF%D9%85-%D8%A7%D9%84%D8%B9%D8%A7%D8%AF%D9%8A%D8%9F-893716.html- `headers.json` febd8b242ff4ba9eaa134422e76e35b7962b344b3a14df9bb179e2ef78224bce 543 bytes
- `page.html` 2349421cf5aa44e0b13caca27e5042a3e1a0ca80c7de8b29b368f9c4176a9fe3 274,342 bytes
- `provenance.json` ac234c45230e139b588857d2c52d1eb60033a6a04fd4877729911447b246cc22 2,421 bytes
- `rendered.html` 54a538fe54004eba524a2490c437d4975d4bf7ae6f1d2cecaf972e62070803b6 283,644 bytes
- `screenshot.jpg` 0ea9825ae8794f129a3423dae52c30a2d8c608403d3e1c828b632b833ab961d3 741,735 bytes
- `text.txt` d84306eefeb71b264b0ee63e74c7d38cdfc39152d345148883608a4db1d559a5 20,706 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.36 · data as of 2026-10-26T17:09Z · vault commit 1dceaa1dfa7f · https://refs.php.oct.2026.newsroom.sgit.ai/sources/ra2ej-php2shell-893716-html/index.html