Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?

Wikipedia, as a graph / PHP2Shell / Every reference

Every reference in Wikipedia's PHP2Shell article

45 references at revision 1381884195: 21 are pages this site's evidence vault holds, 23 are not yet captured, and 44 resolve to a party this site knows. A reference this site has captured is evidence this site can cite as its own, with the capture's hash; a reference it has not is a request to the collectors (board). The publisher is read from the page's address first, so the Y Combinator forum is not The Hacker News.

#ReferencePublisherHereCited byOur claims on it
1PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet
21 October 2026
Wiz Researchcapturedthe infoboxwordpress-drupal, scale-70pc-internet, scale-70pc-websites, ai-found, wiz-independent, most-severe
2CVE-2026-109618The CVE Programcaptured#68f5two-cves-9.2, cisa-none, ac-high
3CVE-2026-109619The CVE Programcaptured#68f5two-cves-9.2
4PHP: News Archive - 20 Oct 2026
20 October 2026
The PHP Group / php.netcaptured#0cdctwo-cves-9.2, rce-modphp, only-update, disclosure-22oct, release-time, preannounce-time
5PHP: News Archive – 21 Oct 2026
21 October 2026
The PHP Group / php.netcaptured#53a6, #6c88, #d5ee, #48b5, #2ef6two-cves-9.2, rce-modphp, only-update, disclosure-22oct, release-time, preannounce-time
6A Hacking Tool Built With A.I. Can Breach Phones Without a Click
8 September 2026
The New York Timesnot captured#0c37none
7PHP2Shell Exploitation: Two Critical PHP Flaws ExplainedRecorded Futurecaptured#6f08no-confirmed-compromise
8PHP: ReleasesThe PHP Group / php.netnot captured#76b5none
9Exclusive AI Just Found a Bug That Puts up to 70% of the World's Websites at Risk
21 October 2026
The Wall Street Journalnot captured#0c37, #dbce, #76b5, #c944none
10PHP knew about one of the flaws in 2024 but could not agree a fix
21 October 2026
The Next Webnot captured#372a, #c944, #c56cnone
11Today's PHP Security Release, and How We're Strengthening PHP SecurityThe PHP Foundationcaptured#372aleak-cve-ids, leak-video
12php.announce: [ANNOUNCE] Upcoming Critical PHP Security ReleaseThe PHP Group / php.netnot captured#cf77none
13PHP warns admins of two critical flaws, emergency patches coming tomorrowBleepingComputercaptured#cf77, #c56cnone
14RCE via OOM corruption
21 October 2026
GitHubcaptured#7844two-cves-9.2, rce-modphp, rce-fpm, fix-bailout, openai-same-day, four-reporters, release-time, fix-engine
15RCE via stale global state
21 October 2026
GitHubcaptured#7844two-cves-9.2, rce-fpm, only-update, four-reporters, fix-engine
16Blog: PHP2Shell: a Timeline
22 October 2026
scherzer.devnot captured#7844none
17Critical PHP Security Release - CVE-2026-109618 and CVE-2026-109619
22 October 2026
cPanelnot captured#7844none
18PHP CVE-2026-109618 and CVE-2026-109619: CloudLinux Package Status and Imunify360 Protection
21 October 2026
CloudLinuxcaptured#7844none
19The PHP developer who became the unsung hero of the internet
24 October 2026
BBC Newsnot captured#c425none
20Tell HN: 2x PHP RCE CVEs with CVSS 10.0 IncomingHacker News (news.ycombinator.com)not captured#c944none
21PHP warns it plans to release 2 emergency patches imminently
20 October 2026
Ars Technicacaptured#eb6bnone
22Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot AWS Security Blog
21 October 2026
Amazon (CJ Moses)captured#b8cdamazon-honeypot, probing, no-confirmed-compromise
23PHP ships emergency patches for critical PHP2Shell flaws
21 October 2026
BleepingComputercaptured#2f40none
24Hold on to your butts: Web admins braced for emergency PHP updates to plug leaked exploits
21 October 2026
PC Gamernot captured#2f40none
25PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free. [...]
21 October 2026
X (Twitter)not captured#2f40none
26PHP RCE FAQ: PHP2Shell CVE-2026-109618 & CVE-2026-109619
20 October 2026
watchTowrcaptured#fb16watchtowr-itw
27Websites taken down worldwide as critical PHP cyber-security update issued
21 October 2026
BBC Newsnot captured#4cd4, #5505none
28Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)
21 October 2026
Huntresscaptured#4cd4huntress-none, no-confirmed-compromise, pocs-wrong
29Government websites go dark after AI-discovered flaw sparks security scramble
21 October 2026
Reutersnot captured#16c7, #5505none
30Major websites go offline as critical PHP vulnerability triggers security fears
21 October 2026
The Brussels Timesnot captured#5505none
31Critical security issue affecting PHP
21 October 2026
UK NCSCcaptured#5505offline-ncsc
32Canadian apps and government websites go offline to ward off online danger
22 October 2026
CP24not captured#e4c5none
33This Flaw Is So Serious Websites Should Consider Going Offline, NSA Says
21 October 2026
PCMagcaptured#76b5, #2c7a, #4324none
34NSA Advisory: PHP Updates
21 October 2026
NSA Cybersecuritynot captured#2c7anone
35Flaw in PHP computer language leads to shutdown of websites around world
21 October 2026
The Guardiannot captured#a19anone
36Singapore organisations urged to patch critical PHP flaws immediately amid cyberattack threat
22 October 2026
CNA (Channel NewsAsia)captured#7a36none
37Critical Vulnerabilities in PHP (PHP2Shell)
21 October 2026
Cyber Security Agency of Singaporenot captured#7a36none
38PHP vulnerability: Which websites and services are affected?
21 October 2026
Mashablenot captured#4324, #5b2anone
39https://www.itmedia.co.jp/news/article/2610/21/2000002472/
21 October 2026
ITmedianot captured#f76f, #5b2anone
40AI just discovered a bug putting 70pc of world's websites at risk
21 October 2026
Australian Financial Reviewnot captured#d02enone
41Global websites shut down after AI found a critical flaw affecting 70% of the internet CNN Business
21 October 2026
CNNcaptured#490fnone
42What is PHP, and how bad is the computer language flaw causing website shutdowns globally?
22 October 2026
The Guardiancaptured#1f46none
43What Is PHP? Why Are Government and Business Websites Going Offline?
22 October 2026
The New York Timesnot captured#a730none
44'If Anything Happens to This Guy ... Everyone Is Screwed'
22 October 2026
The Atlanticnot captured#eaa8, #f0c7none
45(no URL)?no URL#fb16, #4324none