# Source: ثغرتان خطيرتان في PHP تهددان خوادم المواقع - جريدة الراية

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

جريدة الراية: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# ثغرتان خطيرتان في PHP تهددان خوادم المواقع - جريدة الراية

**جريدة الراية** · [https://www.raya.com/2026/10/22/ثغرتان-خطيرتان-في-php-تهددان-خوادم-المواقع](https://www.raya.com/2026/10/22/ثغرتان-خطيرتان-في-php-تهددان-خوادم-المواقع) · published 2026-10-22 11:07:00 · added by `curator@php.newsroom` · slug `raya-2026-10-22-php`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Al Raya (Qatar, Arabic), 22 October, a Q&A style explainer. It says two serious flaws were found in PHP, that authorities and IT-security experts trea...

## What it says, as the collector read it

#### ثغرتان خطيرتان في PHP تهددان خوادم المواقع - جريدة الراية

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `eg/news/raya/2026-10-22-php`, snapshot `20261023T160435Z`. Copied byte for byte; every file's sha256 is in `captures/20261023T160435Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Al Raya (Qatar, Arabic), 22 October, a Q&A style explainer. It says two serious flaws were found in PHP, that authorities and IT-security experts treat the situation as an exceptional emergency because the details leaked unintentionally before the planned date, and that many site operators took sites offline as a precaution. Ordinary users face no direct risk to phones, tablets or computers, but an indirect one if a site they use is unpatched. It says it is not yet clear how the flaws were found though there are many signs that wide use of AI contributed, and that large hosting companies such as IONOS have already updated PHP on their systems.

> كما قامت شركات استضافة مواقع كبرى، مثل "آيونوس"، بتحديث إصدار "بي إتش بي" في أنظمتها بالفعل

_Curator's translation:_ "Large web-hosting companies, such as IONOS, have also already updated the PHP version on their systems."

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ Qatari daily Al-Raya runs a Q&A (apparently translated from German dpa copy) saying Germany's BSI warns of imminent danger and many operators took sites offline. It notes that large hosters such as IONOS have already updated PHP, and that automated attack waves have begun.

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "ثغرتان خطيرتان في PHP تهددان خوادم المواقع - جريدة الراية". Selected mechanically, not read by a person.

#### Capture notes

Language `ar`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261023T160435Z · HTTP 200 · https://www.raya.com/2026/10/22/%D8%AB%D8%BA%D8%B1%D8%AA%D8%A7%D9%86-%D8%AE%D8%B7%D9%8A%D8%B1%D8%AA%D8%A7%D9%86-%D9%81%D9%8A-php-%D8%AA%D9%87%D8%AF%D8%AF%D8%A7%D9%86-%D8%AE%D9%88%D8%A7%D8%AF%D9%85-%D8%A7%D9%84%D9%85%D9%88%D8%A7%D9%82%D8%B9- `headers.json` 85736b61061b4eae930202aee53963fdccb25d6bd47fa0f673ffe12607d27362 1,417 bytes
- `page.html` 101f4e2ad23623ed81ff64d388b0718db4ec5a2306e4c943ac2c4e1cf905c10d 185,759 bytes
- `provenance.json` 9bbac0cd9688549ab37cf2f977d1cffa124b63fa8c5b7033fe2ce30d451b3994 1,683 bytes
- `text.txt` ee2c1881db3c1d9000bef7bee4006da4ddc8585e1e1bc818c44acf401a458c1e 12,078 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.36 · data as of 2026-10-26T17:09Z · vault commit 1dceaa1dfa7f · https://refs.php.oct.2026.newsroom.sgit.ai/sources/raya-2026-10-22-php/index.html