# Source: トレンドマイクロ、PHPの重大な脆弱性「PHP2Shell」への支援・対応策を発表 | トレンドマイクロ (JP)

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

トレンドマイクロ: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# トレンドマイクロ、PHPの重大な脆弱性「PHP2Shell」への支援・対応策を発表 | トレンドマイクロ (JP)

**トレンドマイクロ** · [https://www.trendmicro.com/ja_jp/about/newsroom/press-releases/2026/pr-20261023-01.html](https://www.trendmicro.com/ja_jp/about/newsroom/press-releases/2026/pr-20261023-01.html) · published 2026-10-23 · added by `curator@php.newsroom` · slug `trendmicro-ja-jp-about-newsroom-press-releases-2026`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261024T083755Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Trend Micro Japan (Japanese), 23 October: a press release announcing support measures for PHP2Shell, including a free 'PHP2Shell Exposure Checker' (re...

## What it says, as the collector read it

#### トレンドマイクロ、PHPの重大な脆弱性「PHP2Shell」への支援・対応策を発表 | トレンドマイクロ (JP)

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `eg/news/trendmicro/ja-jp-about-newsroom-press-releases-2026-pr-20261023-01-html`, snapshot `20261024T083755Z`. Copied byte for byte; every file's sha256 is in `captures/20261024T083755Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Trend Micro Japan (Japanese), 23 October: a press release announcing support measures for PHP2Shell, including a free 'PHP2Shell Exposure Checker' (reads a public site's HTTP headers to indicate whether it may be affected) and a PHP web shield for small businesses. It says the flaw details leaked and exploit code was published before the fix, that initial exploitation attempts have been reported, and in a footnote that successful exploitation in the wild had not been confirmed by independent verification (TrendAI security blog, 22 October); it also says results are an indication from externally visible information such as the PHP version, since Linux distributions may ship fixes without changing the version string. Vendor marketing; noted as material only: the vault does not run such tools.

> 実環境での悪用成功は、独立した検証によって確認されていません

_Curator's translation:_ "Successful exploitation in real environments has not been confirmed by independent verification."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "トレンドマイクロ、PHPの重大な脆弱性「PHP2Shell」への支援・対応策を発表 | トレンドマイクロ (JP)". Selected mechanically, not read by a person.

#### Capture notes

Language `ja`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261024T083755Z · HTTP 200 · https://www.trendmicro.com/ja_jp/about/newsroom/press-releases/2026/pr-20261023-01.html- `headers.json` 1ab6961f42dd9f9f95edaba5b1befbcf55e315debb7f389e294becdc1b6c6728 961 bytes
- `page.html` c37e02ecd7d13b419f13fe6f2a9745deff53889dc1efd8ac6f7f93f935674e5d 86,216 bytes
- `provenance.json` 4c8de4751f524032ffd49f8109f9fb90cf1dfdc1af38595b4dcfc2116bd5b0a2 1,825 bytes
- `rendered.html` c3ba754fda3d32b258d89c4f2c66ccb59f17209ef2b1aa222407b001a7f986b7 143,987 bytes
- `screenshot.jpg` caf6371a7c079d40487af5824253a9f9d8b2e838b43b23533035c52e20a03caa 588,986 bytes
- `text.txt` 949a7f1314773718d89d8e117c72f102c36677e39984c3948a639e3d36d9c609 9,942 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.36 · data as of 2026-10-26T17:09Z · vault commit 1dceaa1dfa7f · https://refs.php.oct.2026.newsroom.sgit.ai/sources/trendmicro-ja-jp-about-newsroom-press-releases-2026/index.html