# Source: 「キャンつく」「ヨミトル」PHP重大脆弱性（php2shell）への対応完了のお知らせ | 朝日新聞デジタルマガジン＆[and]

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

朝日新聞デジタル: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# 「キャンつく」「ヨミトル」PHP重大脆弱性（php2shell）への対応完了のお知らせ | 朝日新聞デジタルマガジン＆[and]

**朝日新聞デジタル** · [https://www.asahi.com/and/pressrelease/16986349](https://www.asahi.com/and/pressrelease/16986349) · published not stated in the capture · added by `curator@php.newsroom` · slug `asahi-and-pressrelease-16986349`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Asahi Shimbun Digital Magazine &[and] (Japanese), a PR TIMES press release of 22 October: the company that runs a campaign tool and a diagnostics clou...

## What it says, as the collector read it

#### 「キャンつく」「ヨミトル」PHP重大脆弱性（php2shell）への対応完了のお知らせ | 朝日新聞デジタルマガジン＆[and]

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `jp/news/asahi/and-pressrelease-16986349`, snapshot `20261023T160435Z`. Copied byte for byte; every file's sha256 is in `captures/20261023T160435Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Asahi Shimbun Digital Magazine &[and] (Japanese), a PR TIMES press release of 22 October: the company that runs a campaign tool and a diagnostics cloud says it updated both services to the fixed PHP and finished at 02:39 on 22 October, after starting on the day of disclosure. It describes the flaws as rated critical, 9.2 on CVSS v4.0, and says reports of abuse were already appearing after disclosure.

> 2026年10月22日 02:39に修正版PHPへの更新を完了しております

_Curator's translation:_ "we completed the update to the fixed PHP at 02:39 on 22 October 2026"

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ Press release (via Asahi's PR section) from Tokyo company Pickles Inc.: its services Kyantsuku and Yomitoru finished updating PHP at 02:39 on 22 Oct. It also claims exploitation reports appeared right after disclosure.

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "「キャンつく」「ヨミトル」PHP重大脆弱性（php2shell）への対応完了のお知らせ | 朝日新聞デジタルマガジン＆[and]". Selected mechanically, not read by a person.

#### Capture notes

Language `ja`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261023T160435Z · HTTP 200 · https://www.asahi.com/and/pressrelease/16986349- `headers.json` 99e8fe64b3f75bb1625bad50d01c521d0fe56b0a5636ea71b4af9c4fc5df0b5b 1,847 bytes
- `page.html` 4c8bfb4f812fcd6ac7edf66ef201a9cf8efd7e70b13a8cc36ca2ec28cb68382c 158,942 bytes
- `provenance.json` bdebff9f5f5b543f8610120c5bc4cc22b66968e6b14c15c8557444ad522de74c 1,667 bytes
- `rendered.html` 387271e8e2f31d969844024e018a41e1242d4d10b0a7cd21dd3a011731ef264e 159,217 bytes
- `screenshot.jpg` a68db1225703f0ad548d2186219e6596989d71c9b235c51569a25eb0ac947346 375,533 bytes
- `text.txt` ac30b9c51cb8453e5918872a32d12ff394b985b485eef6b870ba5443d3887d9c 7,433 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.18.2 · data as of 2026-10-24T16:05Z · vault commit 8c16a64a7cf6 · https://php.oct.2026.newsroom.sgit.ai/sources/asahi-and-pressrelease-16986349/index.html