Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Source · news · secondary · captured
Synology: Sicherheitsupdates für PHP gegen PHP2Shell-Lücken
Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Stadt-Bremerhaven.de (Caschys Blog, German), 22 October, by Carsten Knobloch: Synology has published a statement on PHP2Shell after an investigation b...
What it says, as the collector read it
Synology: Sicherheitsupdates für PHP gegen PHP2Shell-Lücken
Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page de/news/stadt-bremerhaven/synology-sicherheitsupdates-fuer-php-gegen-php2shell-luecken, snapshot 20261023T160435Z. Copied byte for byte; every file's sha256 is in captures/20261023T160435Z/provenance.json and was re-checked against the watch's own hashes.
What the page says
_Curator's reading of the capture._
Stadt-Bremerhaven.de (Caschys Blog, German), 22 October, by Carsten Knobloch: Synology has published a statement on PHP2Shell after an investigation by its PSIRT, saying the flaws affect only NAS systems that run certain packages with a PHP dependency (Calendar, IDrive (third-party; Synology Drive itself is unaffected), Joomla, KodExplorer, MailStation (needs a manual update via Package Center), MediaWiki, phpMyAdmin, vtigerCRM, Web Station, WordPress). Synology has released PHP security updates for DSM 7.4, DSM 7.3 and the out-of-support DSM 7.2; older DSM users should disable the affected packages until they upgrade. Synology says DSM's own PHP component has no externally reachable modules and rates that risk minimal, with a patch planned for future DSM versions (advisory Synology-SA-26:14). The blogger adds there are reports that this is not the end of it.
> Nach einer Untersuchung durch das hauseigene Sicherheitsteam (PSIRT) steht fest, dass die Sicherheitslücken nur NAS-Systeme betreffen, auf denen bestimmte Pakete mit PHP-Abhängigkeit laufen.
_Curator's translation:_ "After an investigation by its in-house security team (PSIRT), it is established that the vulnerabilities only affect NAS systems running certain packages with a PHP dependency."
Why it is here
From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Synology: Sicherheitsupdates für PHP gegen PHP2Shell-Lücken". Selected mechanically, not read by a person.
Capture notes
Language de. Nothing in the page addresses an AI or hides text from a reader.
Claims that cite it
No claim cites this source yet.
Events that cite it
No timeline event cites this source yet.
The bytes
capture 20261023T160435Z · HTTP 200 · https://stadt-bremerhaven.de/synology-sicherheitsupdates-fuer-php-gegen-php2shell-luecken/
headers.json47ebfff9d86b48038937cc825706262fea9648729dc6d1d27f2a238056060382 596 bytespage.htmld0223e08954e27a8073145434236f2cb4727d3a443dcd9d31a41eda92817ac54 126,634 bytesprovenance.json03342d3c6d76b2d99dceed5c3f545e8b80e11fa7fd2e707bb6736b69192c415a 1,783 bytesrendered.htmlb34ae46f9992382eafb495ebcbd381651122d04eafbae81a073cc40997a6470b 200,042 bytesscreenshot.jpg8db3ec9b86e894ded12a760cc6767f2b5763137cd21ba186890f8bd5f49d60a7 377,876 bytestext.txt1b02132739192f4c0c9160bb2558737ecb9b7628bd0ca13c7b36b3a1f8f8acc9 6,177 bytes
The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →