「キャンつく」「ヨミトル」PHP重大脆弱性（php2shell）への対応完了のお知らせ | 朝日新聞デジタルマガジン＆[and]

「キャンつく」「ヨミトル」PHP重大脆弱性（php2shell）への対応完了のお知らせ | 朝日新聞デジタルマガジン＆[and]

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page jp/news/asahi/and-pressrelease-16986349, snapshot 20261023T160435Z. Copied byte for byte; every file's sha256 is in captures/20261023T160435Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

Asahi Shimbun Digital Magazine &[and] (Japanese), a PR TIMES press release of 22 October: the company that runs a campaign tool and a diagnostics cloud says it updated both services to the fixed PHP and finished at 02:39 on 22 October, after starting on the day of disclosure. It describes the flaws as rated critical, 9.2 on CVSS v4.0, and says reports of abuse were already appearing after disclosure.

> 2026年10月22日 02:39に修正版PHPへの更新を完了しております

_Curator's translation:_ "we completed the update to the fixed PHP at 02:39 on 22 October 2026"

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ Press release (via Asahi's PR section) from Tokyo company Pickles Inc.: its services Kyantsuku and Yomitoru finished updating PHP at 02:39 on 22 Oct. It also claims exploitation reports appeared right after disclosure.

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "「キャンつく」「ヨミトル」PHP重大脆弱性（php2shell）への対応完了のお知らせ | 朝日新聞デジタルマガジン＆[and]". Selected mechanically, not read by a person.

Capture notes

Language ja. Nothing in the page addresses an AI or hides text from a reader.