Dua Kerentanan Kritis PHP Bocor Sebelum Patch Dirilis | Telset.id

Dua Kerentanan Kritis PHP Bocor Sebelum Patch Dirilis | Telset.id

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page id/news/telset/laptop-pc-dua-celah-kritis-php-bocor-sebelum-patch-situs-web, snapshot 20261023T160435Z. Copied byte for byte; every file's sha256 is in captures/20261023T160435Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

Telset.id (Indonesian), 22 October: two critical PHP flaws leaked before the patch, via the Hacker News forum. It says PHP's advisory announced a patch at 14:00 UTC on Wednesday 21 October for two flaws rated 9.2 on CVSS 4.0, that the flaws are expected to affect PHP versions 5 to 8, that PHP reserved the right to release earlier if details of either became public or active exploitation appeared, and that no active exploitation had been reported at the time.

> PHP juga menyatakan pihaknya berhak merilis lebih awal apabila detail salah satu kerentanan menjadi publik atau muncul bukti eksploitasi aktif di lapangan.

_Curator's translation:_ "PHP also stated that it reserves the right to release earlier if details of one of the vulnerabilities become public or evidence of active exploitation appears in the field."

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ Telset rewrite of BleepingComputer's pre-release story: details leaked via Hacker News (user 'petecooper') and Florian Roth's X post, watchTowr confirmed, the patch was due 21 Oct 14:00 UTC, and there was no active exploitation yet.

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Dua Kerentanan Kritis PHP Bocor Sebelum Patch Dirilis | Telset.id". Selected mechanically, not read by a person.

Capture notes

Language id. Nothing in the page addresses an AI or hides text from a reader.