Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Source · news · secondary · captured
ثلاثة أحرف هزّت الإنترنت.. ما قصة ثغرات PHP التي تهدد المواقع حول العالم؟ | البوابة التقنية
Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T080331Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Tech Portal (Arabic), 23 October: 'three letters that shook the internet', on the PHP flaws threatening sites worldwide. It describes CVE-2026-109618...
What it says, as the collector read it
ثلاثة أحرف هزّت الإنترنت.. ما قصة ثغرات PHP التي تهدد المواقع حول العالم؟ | البوابة التقنية
Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page eg/news/aitnews/2026-10-23-d8-ab-d9-84-d8-a7-d8-ab-d8-a9-d8-a3-d8-ad-d8-b1-d, snapshot 20261023T080331Z. Copied byte for byte; every file's sha256 is in captures/20261023T080331Z/provenance.json and was re-checked against the watch's own hashes.
What the page says
_Curator's reading of the capture._
Tech Portal (Arabic), 23 October: 'three letters that shook the internet', on the PHP flaws threatening sites worldwide. It describes CVE-2026-109618 as a memory-management bug when memory runs out, where PHP may handle internal data that was not fully initialised in an unsafe way, and CVE-2026-109619 as internal data surviving after its memory is freed, which could let an old state be used when handling a new request.
> وتحمل الثغرة الأولى المعرّف CVE-2026-109618
_Curator's translation:_ "The first vulnerability carries the identifier CVE-2026-109618"
Why it is here
From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "ثلاثة أحرف هزّت الإنترنت.. ما قصة ثغرات PHP التي تهدد المواقع حول العالم؟ | البوابة التقنية". Selected mechanically, not read by a person.
Capture notes
Language ar. Nothing in the page addresses an AI or hides text from a reader.
Claims that cite it
No claim cites this source yet.
Events that cite it
No timeline event cites this source yet.
The bytes
capture 20261023T080331Z · HTTP 200 · https://aitnews.com/2026/10/23/%D8%AB%D9%84%D8%A7%D8%AB%D8%A9-%D8%A3%D8%AD%D8%B1%D9%81-%D9%87%D8%B2%D9%91%D8%AA-%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA-%D9%85%D8%A7-%D9%82%D8%B5%D8%A9-%D8%AB%D8%BA%D8%B1%D8%A7%D8%AA-php/
headers.jsone33cbe95faad2c2c19ea87384dcd960f8490d5a19a6fc39a3a85fe9128538e38 1,007 bytespage.html4e7eb6500dc66a74c7198cf6488a3e83645db0660289bcd45cb74b82b81dd212 129,231 bytesprovenance.json2dcded91540541b62a0f69d396b4fc721c2911a278a98de26acb953cfcae70da 2,128 bytesrendered.html4aff09be6b8e8863071d64ddc2447ec77d6eeca33b575319e05d806c2f5424da 125,811 bytesscreenshot.jpgd6bd507f85840779ba36e83cf940ac4b6e63820946fe33bc76491c7c4e5ecd19 682,538 bytestext.txtf056b20036373674bfac4acc8e04626db7344e0b8b8bf2c85e05a163ef80b280 14,759 bytes
The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →