# Source: Pirmdien atklāta jauna un ļoti specifiskos apstākļos izmantojama PHP ievainojamība

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

TVNET: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# Pirmdien atklāta jauna un ļoti specifiskos apstākļos izmantojama PHP ievainojamība

**TVNET** · [https://www.tvnet.lv/8572129/pirmdien-atklata-jauna-un-loti-specifiskos-apstaklos-izmantojama-php-ievainojamiba](https://www.tvnet.lv/8572129/pirmdien-atklata-jauna-un-loti-specifiskos-apstaklos-izmantojama-php-ievainojamiba) · published 2026-10-27 · added by `curator@php.newsroom` · slug `tvnet-8572129-pirmdien-atklata-jauna-un-loti-s`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261028T032724Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). A Latvian news piece (TVNET with LETA, 27 October) relaying CERT.LV: PHP2Shell's two critical flaws were fixed by the patch of 21 October; no successf...

## What it says, as the collector read it

#### Pirmdien atklāta jauna un ļoti specifiskos apstākļos izmantojama PHP ievainojamība

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `lv/news/tvnet/8572129-pirmdien-atklata-jauna-un-loti-specifiskos-apstaklos`, snapshot `20261028T032724Z`. Copied byte for byte; every file's sha256 is in `captures/20261028T032724Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

A Latvian news piece (TVNET with LETA, 27 October) relaying CERT.LV: PHP2Shell's two critical flaws were fixed by the patch of 21 October; no successful attacks exploiting them had been found in Latvia, though attacker activity may rise and tools improve; CERT.LV found about 6,000 potentially affected resources in Latvia, only a few hundred in the public sector, and informed private-sector operators of essential and critical services, hosts and telecoms; public-sector sites are almost fully restored; and operators should check with their system maintainer, not with tools downloaded from the internet, because attackers publish fake diagnostic tools. It also reports that on Monday 26 October a further PHP vulnerability exploitable only under very specific configurations was found, with no emergency patch planned.

> Pagaidām nav konstatēti veiksmīgi kiberuzbrukumi, kuros uzbrucēji būtu izmantojuši kritiskās PHP ievainojamības

_Curator's translation:_ "So far no successful cyberattacks have been found in which attackers exploited the critical PHP vulnerabilities."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Pirmdien atklāta jauna un ļoti specifiskos apstākļos izmantojama PHP ievainojamība". Selected mechanically, not read by a person.

#### Capture notes

Language `lv`. The same CERT.LV statement is held from another Latvian outlet (Jauns.lv). Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261028T032724Z · HTTP 200 · https://www.tvnet.lv/8572129/pirmdien-atklata-jauna-un-loti-specifiskos-apstaklos-izmantojama-php-ievainojamiba- `headers.json` 79c0011df085a73b6e58602232edf930d3dcb988862af3698780eb6976393627 584 bytes
- `page.html` ff524158880c071826f1eb2ce06c986f03fde0467546ec9a6aafd5fbf20f02c8 386,976 bytes
- `provenance.json` daa7143c6516bdf7ec9ac5a756096a56d9d4a379582f885bf9a00f6fa86ee1c6 1,814 bytes
- `rendered.html` 212b0f5c673a8f47a3f52ec38b7d9f43b8c5a68b50f95dbb107e394e161a5f7e 317,763 bytes
- `screenshot.jpg` 7e8d5f7b021845212cf0b01344637a3baa8a322117397e19fa3930a80cc5d666 466,395 bytes
- `text.txt` 7059a643b2bb23b7a52f7cf52c63070d6ab1638db63b1ad5a1e2d71a3d5737b6 8,658 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.51 · data as of 2026-10-28T17:15Z · vault commit 75668aedfb6d · https://refs.php.oct.2026.newsroom.sgit.ai/sources/tvnet-8572129-pirmdien-atklata-jauna-un-loti-s/index.html