# Source: PHP2Shell Vulnerability | PHP flaw trickles down to service disruptions

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

The Daily Star: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# PHP2Shell Vulnerability | PHP flaw trickles down to service disruptions

**The Daily Star** · [https://www.thedailystar.net/news/bangladesh/news/php-flaw-trickles-down-service-disruptions-4306671](https://www.thedailystar.net/news/bangladesh/news/php-flaw-trickles-down-service-disruptions-4306671) · published not stated in the capture · added by `curator@php.newsroom` · slug `thedailystar-news-bangladesh-news-php-flaw-trickles-d`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261028T071103Z, queue priority 2 (mechanical selection by researcher@php.newsroom, read by the curator). A Bangladeshi news report (The Daily Star) on service disruptions after the PHP flaw: Bangladesh Bank's website down since Thursday, three state and c...

## What it says, as the collector read it

#### PHP2Shell Vulnerability | PHP flaw trickles down to service disruptions

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `gb/news/thedailystar/news-bangladesh-news-php-flaw-trickles-down-service-disrupti`, snapshot `20261028T071103Z`. Copied byte for byte; every file's sha256 is in `captures/20261028T071103Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

A Bangladeshi news report (The Daily Star) on service disruptions after the PHP flaw: Bangladesh Bank's website down since Thursday, three state and commercial banks' sites offline as of 5pm the previous day, others back after patching, and the land ministry suspending its digital land services for 36 hours after an urgent alert from BGD e-GOV CIRT on 22 October. It repeats Wiz's estimate of about 70% of websites, the patch of 21 October, a related vulnerability reported on 23 October that affects the patched versions, and the UK cybersecurity minister's statement that 32 government services were taken offline, and quotes two local experts on old systems that cannot be updated.

> The vulnerability lies in PHP itself, not in website code, leaving even well-coded websites at risk

#### Why it is here

From the promotion queue (`index/promote.json`, priority 2): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell Vulnerability | PHP flaw trickles down to service disruptions". Selected mechanically, not read by a person. Text also matches compromise/breach terms: check for a named organisation or cause.

#### Capture notes

Language `en`. The capture shows no publication date; the text places it just after a five-day holiday ended. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261028T071103Z · HTTP 200 · https://www.thedailystar.net/news/bangladesh/news/php-flaw-trickles-down-service-disruptions-4306671- `headers.json` f9c4abbd72d6f130789862e2e3b77677a1c1de661562ca663bd462c96969e9be 3,394 bytes
- `page.html` 2fa1a11b521fbbf0f8c4e2ec3c5653fdcb1668f13b7ada57cd8c02b16f87a58a 124,737 bytes
- `provenance.json` 4dc70f6ed03f765f14a9feb7ad091e04aaff8beed7c681f588fd226ec6d94dd2 1,797 bytes
- `rendered.html` d4d60a0471c396513d642c2170e0143ea03c8c66769b0a57e6086afafa095e65 138,312 bytes
- `screenshot.jpg` 0e624e0606ace92fba0669069d136f94be65273d0fa8a50dfe70259ba8f100e8 624,571 bytes
- `text.txt` 35f68d9519218a631114d490696341ea1c558f7b090f9b0bacf02377521b7fe8 8,922 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.51 · data as of 2026-10-28T17:15Z · vault commit 75668aedfb6d · https://refs.php.oct.2026.newsroom.sgit.ai/sources/thedailystar-news-bangladesh-news-php-flaw-trickles-d/index.html