Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Source · news · secondary · captured
PHP2Shell: fallos críticos de PHP provocan cierres de webs
Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Teknófilo (Spain, Spanish), 22 October, by Luis A.: two critical PHP flaws led to services being disconnected preventively while owners applied the fi...
What it says, as the collector read it
PHP2Shell: fallos críticos de PHP provocan cierres de webs
Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page ar/news/teknofilo/php2shell-fallos-php-cierre-webs-actualizacion, snapshot 20261023T160435Z. Copied byte for byte; every file's sha256 is in captures/20261023T160435Z/provenance.json and was re-checked against the watch's own hashes.
What the page says
_Curator's reading of the capture._
Teknófilo (Spain, Spanish), 22 October, by Luis A.: two critical PHP flaws led to services being disconnected preventively while owners applied the fixes. It says the updates were published on 21 October, that the flaw sits in the engine so it can reach sites whose code and CMS are up to date, that both CVEs score 9.2 and allow remote code execution without logging in under some conditions, that the UK NCSC advisory explains the memory-management and failure-handling causes, and, citing Wiz, that process memory (passwords, tokens, access keys) can be read. No new facts.
> Dos vulnerabilidades críticas de PHP, conocidas como PHP2Shell, han llevado a desconectar servicios de forma preventiva mientras sus responsables aplicaban las correcciones.
_Curator's translation:_ "Two critical PHP vulnerabilities, known as PHP2Shell, have led to services being disconnected preventively while their owners applied the fixes."
_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T171501Z, not necessarily this one):_ Teknofilo explains PHP2Shell, why WordPress sites are exposed, and which versions fix it. It covers the Dutch government's shutdown of Overheid.nl, MijnOverheid.nl and DigiD, Wikimedia's Cloud VPS/Toolforge outage, and AWS's early detection.
Why it is here
From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell: fallos críticos de PHP provocan cierres de webs". Selected mechanically, not read by a person.
Capture notes
Language es. Nothing in the page addresses an AI or hides text from a reader.
Claims that cite it
No claim cites this source yet.
Events that cite it
No timeline event cites this source yet.
The bytes
capture 20261023T160435Z · HTTP 200 · https://www.teknofilo.com/php2shell-fallos-php-cierre-webs-actualizacion/
headers.json60923e8a376cdaaec315cf058ecf0a866ec1cb0e8e4fb4975827bdacc60e279a 918 bytespage.html9cf6f961639109ec2b75185b0aa1297bffd9a067064d691eb25591975d8b4c9c 285,494 bytesprovenance.json2e1464cb1c69abdb9fe4a84b967a3c0d37574f11d81da4f1309e994d873fd8e9 1,546 bytestext.txt7a39ad9839af226a96cdb6cddbce5c9a5575c4fa4718543567d1ffd1b0332a8a 10,573 bytes
The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →