# Source: php2shell (CVE-2026-109618, CVE-2026-109619): Critical PHP RCE FAQ | Tenable®

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Tenable: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · vendor · secondary · captured

# php2shell (CVE-2026-109618, CVE-2026-109619): Critical PHP RCE FAQ | Tenable®

**Tenable** · [https://www.tenable.com/blog/php2shell-cve-2026-109618-cve-2026-109619-frequently-asked-questions-about-critical-php-remote](https://www.tenable.com/blog/php2shell-cve-2026-109618-cve-2026-109619-frequently-asked-questions-about-critical-php-remote) · published 2026-10-21 · added by `claude-story-site` · slug `tenable-php2shell-faq`

Vendor FAQ; notes Cloudflare's rules cover only traffic routed through Cloudflare.

## What it says, as the collector read it

#### php2shell (CVE-2026-109618, CVE-2026-109619): Critical PHP RCE FAQ | Tenable®

Captured by claude-story-site. Status: captured. Vendor FAQ; notes Cloudflare's rules cover only traffic routed through Cloudflare.

- Captured for the record.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261022T112331Z · HTTP 200 · https://www.tenable.com/blog/php2shell-cve-2026-109618-cve-2026-109619-frequently-asked-questions-about-critical-php-remote- `headers.json` 5ddfb8ebd67d5b056190eb932bd7230be55b6dcec36b71da7591e9ff3ef787e9 1,390 bytes
- `page.html` 0f90e53e8a45f385d5e14f7493f1aa99aff8d34b7405ed43d70a3534381dd264 274,325 bytes
- `provenance.json` f1f23ada9af900931c49744b7cb544a8b730ec5038bd6637c3a3b521f095c4d6 1,155 bytes
- `rendered.html` bbc941dd99bd25fbb24457889bb89c0cd2213187cc104c491b15a86ad1167425 469,247 bytes
- `screenshot.png` fb42572ffc60b269206740e6d85216b9fa06d7226bfb49682d148b44740c897c 2,222,099 bytes
- `text.txt` 10d98694b9c0243efaf17de612d27de215138873b711598eae3f68ceb9b11b54 16,528 bytes
capture 20261023T080331Z · HTTP 200 · https://www.tenable.com/blog/php2shell-cve-2026-109618-cve-2026-109619-frequently-asked-questions-about-critical-php-remote- `headers.json` 1d02381084191d6534f0983e1c7a9f34065d722a633b924b9d5f4ab911f53790 1,459 bytes
- `page.html` c231dd15491a108f1ace260f414fb4d60d4f4d42763f7c4aa7813c8a7170de79 273,785 bytes
- `provenance.json` c31c494b31128bda6983281792f57d8f98477983b9afa9810176bfa94e7a74d4 1,875 bytes
- `rendered.html` d755e9f15fdceebffb5e603cca452d77d6a11085e45d792a961c59602842ff85 463,959 bytes
- `screenshot.jpg` fd220e0c7ad0bd16ea40637a14d213d69ed25dbf59b1729c084677c6c15697fb 712,844 bytes
- `text.txt` 7cc4ddb02c3fbb29a56167a1dd773f3166ea426fed07f8ce4ca27c3b95497359 15,649 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.26 · data as of 2026-10-25T14:40Z · vault commit 94352a55fbaa · https://refs.php.oct.2026.newsroom.sgit.ai/sources/tenable-php2shell-faq/index.html