Synology製品における「PHP2Shell」脆弱性の影響について | 株式会社アスク

Synology製品における「PHP2Shell」脆弱性の影響について | 株式会社アスク

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page jp/news/ask-corp/news-2026-10-synology-php2shell-vulnerabilities-html, snapshot 20261023T160435Z. Copied byte for byte; every file's sha256 is in captures/20261023T160435Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

ASK Corporation (Japanese distributor of Synology), 23 October: Synology's PSIRT investigated and found the impact is limited to systems running certain PHP-dependent packages: Calendar, IDrive (third party), Joomla, KodExplorer, MailStation, MediaWiki, phpMyAdmin, vtigerCRM, Web Station and WordPress; Synology Drive is not affected. Security updates for PHP were released for DSM 7.4, 7.3 and the end-of-life 7.2; updating through Package Center restarts the package and clears the flaw (MailStation needs a manual update).

> これによる影響は一部のPHP依存パッケージ（アプリ）を実行しているシステムに限定されている

_Curator's translation:_ "the impact is limited to systems running some PHP-dependent packages (apps)"

Why it is here

From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Synology製品における「PHP2Shell」脆弱性の影響について | 株式会社アスク". Selected mechanically, not read by a person.

Capture notes

Language ja. Nothing in the page addresses an AI or hides text from a reader.