# Source: PHP2Shell: What to know about two critical PHP flaws

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

WeLiveSecurity: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# PHP2Shell: What to know about two critical PHP flaws

**WeLiveSecurity** · [https://www.welivesecurity.com/en/videos/php2shell-what-know-two-critical-php-flaws/](https://www.welivesecurity.com/en/videos/php2shell-what-know-two-critical-php-flaws/) · published not stated in the capture · added by `curator@php.newsroom` · slug `welivesecurity-en-videos-php2shell-what-know-two-critic`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261027T094306Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). WeLiveSecurity (ESET, English): a two-minute video page, 'PHP2Shell: What to know about two critical PHP flaws'. The text (2,697 characters) says that...

## What it says, as the collector read it

#### PHP2Shell: What to know about two critical PHP flaws

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `au/news/welivesecurity/en-videos-php2shell-what-know-two-critical-php-flaws`, snapshot `20261027T094306Z`. Copied byte for byte; every file's sha256 is in `captures/20261027T094306Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

WeLiveSecurity (ESET, English): a two-minute video page, 'PHP2Shell: What to know about two critical PHP flaws'. The text (2,697 characters) says that last week details emerged about two critical PHP vulnerabilities, advisories followed from government agencies, and some sites went offline as a precaution, since on an unpatched server an attacker can run code without logging in; three of four websites are estimated to use PHP in some capacity. It points readers to the advisories of the PHP Project, CISA, CERT-EU and NCSC for mitigation steps. No new facts.

> Here's the lowdown on CVE-2026-109618 and CVE-2026-109619, as well as what website owners and IT teams should do to stay safe – all in a little more than two minutes

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell: What to know about two critical PHP flaws". Selected mechanically, not read by a person.

#### Capture notes

Language `en`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261027T094306Z · HTTP 200 · https://www.welivesecurity.com/en/videos/php2shell-what-know-two-critical-php-flaws/- `headers.json` 126f06d9e82881d27a165746e721868cd89931105e348602c8c3f15a90f91e32 5,449 bytes
- `page.html` b0b21a123739c42766a1d06ba6049e5af443c38eb47625dcfaad8dc37439e7b1 68,207 bytes
- `provenance.json` ea1bc5bc42bcb02ff0a46527584af29ea473274dbfa5c773d6178cf064d07df7 1,736 bytes
- `rendered.html` f9cfc37aad683af022bb691908be38e74cb7a1f7461b382cbad160e9d4437c21 115,515 bytes
- `screenshot.jpg` 1d777119b2f77ddaf6e6b0e9a8485bc71f98b1d6759e4b9ccde7beee92d1d438 175,247 bytes
- `text.txt` 58086fa4d56fc57fd60a685665bd2afffb52dd566c2c93dfe7128b101ad44358 2,747 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.45 · data as of 2026-10-27T09:43Z · vault commit 55b47c4d6af1 · https://refs.php.oct.2026.newsroom.sgit.ai/sources/welivesecurity-en-videos-php2shell-what-know-two-critic/index.html