Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Source · news · secondary · captured
ثغرة جديدة في PHP تتيح تنفيذ شيفرات عن بُعد.. لماذا لا يحتاج بعض المسؤولين إلى إجراء إضافي؟
Promoted from the source watch (pack copy 7r83qic5), snapshot 20261025T093507Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Turkey Breaking (Arabic, relaying Sözcü), 25 October: a new PHP vulnerability, CVE-2026-115560, was disclosed two days after the urgent PHP2Shell fixe...
What it says, as the collector read it
ثغرة جديدة في PHP تتيح تنفيذ شيفرات عن بُعد.. لماذا لا يحتاج بعض المسؤولين إلى إجراء إضافي؟
Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page eg/news/turkey-breaking/news-2026-10-25-d8-ab-d8-ba-d8-b1-d8-a9-d8-ac-d8-af-d9-8a-d8, snapshot 20261025T093507Z. Copied byte for byte; every file's sha256 is in captures/20261025T093507Z/provenance.json and was re-checked against the watch's own hashes.
What the page says
_Curator's reading of the capture._
Turkey Breaking (Arabic, relaying Sözcü), 25 October: a new PHP vulnerability, CVE-2026-115560, was disclosed two days after the urgent PHP2Shell fixes. The PHP developers judged that the configurations that cause it are unlikely to be used in real applications, so no emergency patch has been issued and the fix is expected in the next regular bug-fix release; as of the article PHP had not disclosed the affected versions, the release that will carry the fix or the severity, and it is still unknown whether the new flaw shares a root cause with one of the earlier PHP2Shell flaws. A mitigation the PHP team gave on 21 October already covers it for administrators who applied it. The conditions for exploitation that the article lists are left out of the notes.
> وحُددت الثغرة الجديدة بالرقم CVE-2026-115560، فيما قدّر مطورو PHP أن احتمال استخدام الإعدادات المسببة لها في التطبيقات الفعلية منخفض.
_Curator's translation:_ "The new vulnerability was identified as CVE-2026-115560, while PHP developers estimated that the likelihood of the settings that cause it being used in real applications is low."
Why it is here
From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "ثغرة جديدة في PHP تتيح تنفيذ شيفرات عن بُعد.. لماذا لا يحتاج بعض المسؤولين إلى إجراء إضافي؟". Selected mechanically, not read by a person.
Capture notes
Language ar. Nothing in the page addresses an AI or hides text from a reader.
Claims that cite it
No claim cites this source yet.
Events that cite it
No timeline event cites this source yet.
The bytes
capture 20261025T093507Z · HTTP 200 · https://turkey-breaking.com/News/2026/10/25/%d8%ab%d8%ba%d8%b1%d8%a9-%d8%ac%d8%af%d9%8a%d8%af%d8%a9-%d9%81%d9%8a-php-%d8%aa%d8%aa%d9%8a%d8%ad-%d8%aa%d9%86%d9%81%d9%8a%d8%b0-%d8%b4%d9%8a%d9%81%d8%b1%d8%a7%d8%aa-%d8%b9%d9%86-%d8%a8%d9%8f%d8%b9/
headers.jsonb56c3a91d7ad1321600b02fab05bca0ef2629e8fbc5d0ebc3775da21e1437f07 1,125 bytespage.html4276cdd5fa756e51667f8deccb46444beccab9a23b4f599333b5616bb276b9b3 130,616 bytesprovenance.jsonf3d0fc7d1f2abd7d408eb4e5bf535f67b5d5fd9b74e4957e363fe55650ec1500 2,179 bytesrendered.htmlff1d444ad2ab5f1909e10cef91676c56b1c742dd9215988b8ead5b3bdcf14549 618,558 bytesscreenshot.jpga2549f815c6284ff987630f9ebf9faf2cad7c05c5dfba0adfa453de235fe2b02 305,529 bytestext.txtb8d2060e6c49ff425e5e2b4acb811b0426fca145e7feee935a34dc5089430c6e 8,716 bytes
The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →