# Source: PHP-Bedrohung: Was über die Sicherheitslücke bekannt ist | tagesschau.de

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

tagesschau.de: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# PHP-Bedrohung: Was über die Sicherheitslücke bekannt ist | tagesschau.de

**tagesschau.de** · [https://www.tagesschau.de/wirtschaft/digitales/php-panne-100.html](https://www.tagesschau.de/wirtschaft/digitales/php-panne-100.html) · published 2026-10-22T15:41:31 · added by `curator@php.newsroom` · slug `tagesschau-wirtschaft-digitales-php-panne-100-html`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). tagesschau.de (ARD, German), 22 October: what is known about the PHP security hole. It says the German BSI published an official cyber-security warnin...

## What it says, as the collector read it

#### PHP-Bedrohung: Was über die Sicherheitslücke bekannt ist | tagesschau.de

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `de/news/tagesschau/wirtschaft-digitales-php-panne-100-html`, snapshot `20261023T160435Z`. Copied byte for byte; every file's sha256 is in `captures/20261023T160435Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

tagesschau.de (ARD, German), 22 October: what is known about the PHP security hole. It says the German BSI published an official cyber-security warning (reference BITS-H No. 2026-297981-1032) rating the risk at warning level '3 / Orange', extraordinarily high, meaning countermeasures must be taken at once because serious disruption to normal operations threatens; that the PHP developers published updated versions on Wednesday afternoon; that Heise Security warned operators that working malicious programs would appear within hours or at most days; that Digital Minister Karsten Wildberger told Bild that no damage had been done to federal IT systems and no sign that federal sites and infrastructure are affected; and that large hosts such as IONOS had already updated PHP, so sites with automatic security updates are at least protected.

> In der Warnung (Aktenzeichen BITS-H Nr. 2026-297981-1032) ordnet das BSI das Risiko mit der Warnstufe "3 / Orange" als außerordentlich hoch ein.

_Curator's translation:_ "In the warning (reference BITS-H No. 2026-297981-1032) the BSI classes the risk as extraordinarily high with warning level '3 / Orange'."

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ Tagesschau explainer: many sites were taken offline yesterday and many are back. It cites the BSI warning (file number BITS-H Nr. 2026-297981-1032, level '3 / Orange'), Marc Henrichmann in Handelsblatt, Digital Minister Wildberger, heise's warning about exploits within hours or days, and says hosters like Ionos have already updated PHP.

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP-Bedrohung: Was über die Sicherheitslücke bekannt ist | tagesschau.de". Selected mechanically, not read by a person.

#### Capture notes

Language `de`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261023T160435Z · HTTP 200 · https://www.tagesschau.de/wirtschaft/digitales/faq-php-sicherheitsluecke-100.html- `headers.json` 40fbd7c84ab114056a07be929bf764dd6caf6cd982a301e123ba2021a8ff6a41 723 bytes
- `page.html` 3a12ec82611b7543569879d72cd1a35cdf7178942b14dcf40af7ff22e9ac1e65 534,880 bytes
- `provenance.json` 513a0afc9952926835ce81fa24f259dc15d54e10c33e049e0376374580de3061 1,549 bytes
- `text.txt` 05d9718a79ed9daae15685b51b45c40420bd82feb2abed7c8125dd0287de566b 8,883 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.36 · data as of 2026-10-26T17:09Z · vault commit 1dceaa1dfa7f · https://refs.php.oct.2026.newsroom.sgit.ai/sources/tagesschau-wirtschaft-digitales-php-panne-100-html/index.html