# Source: PHP2Shell: Was hinter der Sicherheitslücke steckt

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

WDR: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# PHP2Shell: Was hinter der Sicherheitslücke steckt

**WDR** · [https://www1.wdr.de/gravierende-fehler-in-skript-sprache-php-gefahr-auf-servern-im-web-100.html](https://www1.wdr.de/gravierende-fehler-in-skript-sprache-php-gefahr-auf-servern-im-web-100.html) · published 2026-10-21T18:52:59+02:00 · added by `curator@php.newsroom` · slug `www1-wdr-gravierende-fehler-in-skript-sprache-php`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261024T160544Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). WDR (Germany, German), 21 October, by Jörg Schieb (WDR digital expert): why towns and clinics are switching their websites off. A short video piece wi...

## What it says, as the collector read it

#### PHP2Shell: Was hinter der Sicherheitslücke steckt

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `de/news/www1-wdr/gravierende-fehler-in-skript-sprache-php-gefahr-auf-servern`, snapshot `20261024T160544Z`. Copied byte for byte; every file's sha256 is in `captures/20261024T160544Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

WDR (Germany, German), 21 October, by Jörg Schieb (WDR digital expert): why towns and clinics are switching their websites off. A short video piece with text: two serious flaws in the software much of the internet runs on, the risk that attackers exploit them is high, updates have been available since Wednesday afternoon at 16:00 (CEST) and millions of web servers are waiting for them, PHP is a server-side script language that builds pages when they are opened, and WordPress alone is estimated to sit behind 400 to 500 million sites; a linked item says the BSI has so far found no cyber attacks. No new facts.

> Seit Mittwochnachmittag, 16 Uhr, stehen Sicherheits-Updates bereit

_Curator's translation:_ "Security updates have been available since Wednesday afternoon, 4 p.m."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell: Was hinter der Sicherheitslücke steckt". Selected mechanically, not read by a person.

#### Capture notes

Language `de`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261024T160544Z · HTTP 200 · https://www1.wdr.de/gravierende-fehler-in-skript-sprache-php-gefahr-auf-servern-im-web-100.html- `headers.json` 00b67b13d3830cd5bb6c3fb278f1c50a582cb73321e374148fa9e1341b103da3 471 bytes
- `page.html` e7dc0c7ccae52eb74290fbcb0d12f5e54e397b91f9f44ee36198dad3b735eef4 56,486 bytes
- `provenance.json` d14a693cdd5b152e81004ae177cccad9ba407ce22b42c7cd29f61457c581a8e7 1,752 bytes
- `rendered.html` 55080ffca073e28f330ddd075f93decc4b6ec434059f177ce0db49d790dcddff 57,730 bytes
- `screenshot.jpg` 0b9bb2bf2a9fb6e0a750034b5b1be516eaa2068e60955aead5eacaedc08dc282 363,701 bytes
- `text.txt` b66065982d5a6b2fce0df487f503f6c7e575a3fada6b350a9e3fa481a8b7c0ff 3,645 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.45 · data as of 2026-10-27T09:43Z · vault commit 55b47c4d6af1 · https://refs.php.oct.2026.newsroom.sgit.ai/sources/www1-wdr-gravierende-fehler-in-skript-sprache-php/index.html