# Source: Alertă DNSC: Două vulnerabilități critice în PHP pun în pericol milioane de site-uri. Hackerii pot prelua controlul serverelor – Ziua Veche

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Ziua Veche: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# Alertă DNSC: Două vulnerabilități critice în PHP pun în pericol milioane de site-uri. Hackerii pot prelua controlul serverelor – Ziua Veche

**Ziua Veche** · [https://www.ziuaveche.ro/stiinta-it/it/alerta-dnsc-doua-vulnerabilitati-critice-in-php-pun-in-pericol-milioane-de-site-uri-hackerii-pot-prelua-controlul-serverelor-352406.html/](https://www.ziuaveche.ro/stiinta-it/it/alerta-dnsc-doua-vulnerabilitati-critice-in-php-pun-in-pericol-milioane-de-site-uri-hackerii-pot-prelua-controlul-serverelor-352406.html/) · published 2026-10-22T08:14:10+00:00 · added by `curator@php.newsroom` · slug `ziuaveche-stiinta-it-it-alerta-dnsc-doua-vulnerabi`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Ziua Veche (Romania, Romanian), 22 October: Romania's National Cyber Security Directorate (DNSC) has issued an alert on the two PHP flaws, rated 9.2 o...

## What it says, as the collector read it

#### Alertă DNSC: Două vulnerabilități critice în PHP pun în pericol milioane de site-uri. Hackerii pot prelua controlul serverelor – Ziua Veche

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `ro/news/ziuaveche/stiinta-it-it-alerta-dnsc-doua-vulnerabilitati-critice-in-ph`, snapshot `20261023T160435Z`. Copied byte for byte; every file's sha256 is in `captures/20261023T160435Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Ziua Veche (Romania, Romanian), 22 October: Romania's National Cyber Security Directorate (DNSC) has issued an alert on the two PHP flaws, rated 9.2 on CVSS 4.0, that can allow unauthenticated remote code execution; patches were published on 21 October. It cites CERT-EU's warning, notes versions 8.1 and older no longer get project updates, says several government sites and online services in Europe and elsewhere were temporarily unavailable or taken down preventively (Reuters), and recommends identifying the PHP version, backing up, updating PHP separately from WordPress and plugins, examining security logs, and, where updating is not possible at once, considering temporary isolation (CERT-EU). The DNSC alert refers to Law 58/2023, article 5(a), on responsibility for the security of IT systems.

> Directoratul Național de Securitate Cibernetică (DNSC) a emis o alertă privind două vulnerabilități extrem de grave descoperite în PHP

_Curator's translation:_ "The National Cyber Security Directorate (DNSC) has issued an alert about two extremely serious vulnerabilities discovered in PHP."

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ Ziua Veche reports that Romania's National Cyber Security Directorate (DNSC) issued an alert on the two PHP flaws, recommending immediate checks and updates. DNSC cites Law 58/2023 art. 5(a), which makes system owners and operators responsible for their own cyber security.

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Alertă DNSC: Două vulnerabilități critice în PHP pun în pericol milioane de site-uri. Hackerii pot prelua controlul serverelor – Ziua Veche". Selected mechanically, not read by a person.

#### Capture notes

Language `ro-RO`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261023T160435Z · HTTP 200 · https://www.ziuaveche.ro/stiinta-it/it/alerta-dnsc-doua-vulnerabilitati-critice-in-php-pun-in-pericol-milioane-de-site-uri-hackerii-pot-prelua-controlul-serverelor-352406.html/- `headers.json` cedbf6c46f32843ebc70c5712e89892d4f052e7510fff20229166c9016c6678c 766 bytes
- `page.html` abdc83fc4fab0573bc70f88463fc05f300105768f36087ad267bc17656d441f9 345,631 bytes
- `provenance.json` 5d5847a20244091c24ee1cff1f38cdc8904e13bf7b3a990331ed99a44e66d1fb 2,018 bytes
- `rendered.html` d416191694207632c5fa88228f53d895335782dbdd08b11b2de8f44d2e0f296c 446,330 bytes
- `screenshot.jpg` 07d4bdd6efdf6c7a7e465a8689832888c314e157c76e7c62943f3a889495bfa9 567,028 bytes
- `text.txt` 73e7889faed99b000c9d4f87b3685b200fdf352d8fcffc89b3e0a78e1c3248be 9,304 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.49 · data as of 2026-10-27T19:13Z · vault commit 6f0d5c50bf12 · https://refs.php.oct.2026.newsroom.sgit.ai/sources/ziuaveche-stiinta-it-it-alerta-dnsc-doua-vulnerabi/index.html