PHP2Shell: Was hinter der Sicherheitslücke steckt

PHP2Shell: Was hinter der Sicherheitslücke steckt

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page de/news/www1-wdr/gravierende-fehler-in-skript-sprache-php-gefahr-auf-servern, snapshot 20261024T160544Z. Copied byte for byte; every file's sha256 is in captures/20261024T160544Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

WDR (Germany, German), 21 October, by Jörg Schieb (WDR digital expert): why towns and clinics are switching their websites off. A short video piece with text: two serious flaws in the software much of the internet runs on, the risk that attackers exploit them is high, updates have been available since Wednesday afternoon at 16:00 (CEST) and millions of web servers are waiting for them, PHP is a server-side script language that builds pages when they are opened, and WordPress alone is estimated to sit behind 400 to 500 million sites; a linked item says the BSI has so far found no cyber attacks. No new facts.

> Seit Mittwochnachmittag, 16 Uhr, stehen Sicherheits-Updates bereit

_Curator's translation:_ "Security updates have been available since Wednesday afternoon, 4 p.m."

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell: Was hinter der Sicherheitslücke steckt". Selected mechanically, not read by a person.

Capture notes

Language de. Nothing in the page addresses an AI or hides text from a reader.