# Source: ثلاثة أحرف هزّت الإنترنت.. ما قصة ثغرات PHP التي تهدد المواقع حول العالم؟ | البوابة التقنية

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

البوابة التقنية: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# ثلاثة أحرف هزّت الإنترنت.. ما قصة ثغرات PHP التي تهدد المواقع حول العالم؟ | البوابة التقنية

**البوابة التقنية** · [https://aitnews.com/2026/10/23/%D8%AB%D9%84%D8%A7%D8%AB%D8%A9-%D8%A3%D8%AD%D8%B1%D9%81-%D9%87%D8%B2%D9%91%D8%AA-%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA-%D9%85%D8%A7-%D9%82%D8%B5%D8%A9-%D8%AB%D8%BA%D8%B1%D8%A7%D8%AA-php/](https://aitnews.com/2026/10/23/%D8%AB%D9%84%D8%A7%D8%AB%D8%A9-%D8%A3%D8%AD%D8%B1%D9%81-%D9%87%D8%B2%D9%91%D8%AA-%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA-%D9%85%D8%A7-%D9%82%D8%B5%D8%A9-%D8%AB%D8%BA%D8%B1%D8%A7%D8%AA-php/) · published 2026-10-23T00:15:43+00:00 · added by `curator@php.newsroom` · slug `aitnews-2026-10-23-d8-ab-d9-84-d8-a7-d8-ab-d8-a9`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T080331Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Tech Portal (Arabic), 23 October: 'three letters that shook the internet', on the PHP flaws threatening sites worldwide. It describes CVE-2026-109618...

## What it says, as the collector read it

#### ثلاثة أحرف هزّت الإنترنت.. ما قصة ثغرات PHP التي تهدد المواقع حول العالم؟ | البوابة التقنية

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `eg/news/aitnews/2026-10-23-d8-ab-d9-84-d8-a7-d8-ab-d8-a9-d8-a3-d8-ad-d8-b1-d`, snapshot `20261023T080331Z`. Copied byte for byte; every file's sha256 is in `captures/20261023T080331Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Tech Portal (Arabic), 23 October: 'three letters that shook the internet', on the PHP flaws threatening sites worldwide. It describes CVE-2026-109618 as a memory-management bug when memory runs out, where PHP may handle internal data that was not fully initialised in an unsafe way, and CVE-2026-109619 as internal data surviving after its memory is freed, which could let an old state be used when handling a new request.

> وتحمل الثغرة الأولى المعرّف CVE-2026-109618

_Curator's translation:_ "The first vulnerability carries the identifier CVE-2026-109618"

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "ثلاثة أحرف هزّت الإنترنت.. ما قصة ثغرات PHP التي تهدد المواقع حول العالم؟ | البوابة التقنية". Selected mechanically, not read by a person.

#### Capture notes

Language `ar`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261023T080331Z · HTTP 200 · https://aitnews.com/2026/10/23/%D8%AB%D9%84%D8%A7%D8%AB%D8%A9-%D8%A3%D8%AD%D8%B1%D9%81-%D9%87%D8%B2%D9%91%D8%AA-%D8%A7%D9%84%D8%A5%D9%86%D8%AA%D8%B1%D9%86%D8%AA-%D9%85%D8%A7-%D9%82%D8%B5%D8%A9-%D8%AB%D8%BA%D8%B1%D8%A7%D8%AA-php/- `headers.json` e33cbe95faad2c2c19ea87384dcd960f8490d5a19a6fc39a3a85fe9128538e38 1,007 bytes
- `page.html` 4e7eb6500dc66a74c7198cf6488a3e83645db0660289bcd45cb74b82b81dd212 129,231 bytes
- `provenance.json` 2dcded91540541b62a0f69d396b4fc721c2911a278a98de26acb953cfcae70da 2,128 bytes
- `rendered.html` 4aff09be6b8e8863071d64ddc2447ec77d6eeca33b575319e05d806c2f5424da 125,811 bytes
- `screenshot.jpg` d6bd507f85840779ba36e83cf940ac4b6e63820946fe33bc76491c7c4e5ecd19 682,538 bytes
- `text.txt` f056b20036373674bfac4acc8e04626db7344e0b8b8bf2c85e05a163ef80b280 14,759 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.18.2 · data as of 2026-10-24T16:05Z · vault commit 8c16a64a7cf6 · https://php.oct.2026.newsroom.sgit.ai/sources/aitnews-2026-10-23-d8-ab-d9-84-d8-a7-d8-ab-d8-a9/index.html