Source · vendor · secondary · captured

PHP2Shell: Two Critical PHP Flaws Allow Unauthenticated Remote Code Execution | SECURITY.COM

Broadcom (Symantec) Security · https://www.security.com/blog-post/php2shell-critical-vulns-cve-2026-109618-109619 · published 2026-10-21 · added by claude-story-site · slug broadcom-security-php2shell

Vendor explainer.

What it says, as the collector read it

PHP2Shell: Two Critical PHP Flaws Allow Unauthenticated Remote Code Execution | SECURITY.COM

Captured by claude-story-site. Status: captured. Vendor explainer.

  • Captured for the record.

Claims that cite it

No claim cites this source yet.

Events that cite it

No timeline event cites this source yet.

The bytes

capture 20261022T112608Z · HTTP 200 · https://www.security.com/blog-post/php2shell-critical-vulns-cve-2026-109618-109619
  • headers.json 90e7e97292b84a9655eb632719cd295101372dea8bfbbea1c37cac21f29c6083 2,018 bytes
  • page.html ee4999fb83f9cd38b29e33384e6cd904f855429326277bbcaaaa0b5796879cf8 329,468 bytes
  • provenance.json c676441507e6939f7a352231caebe725dfa363ad55108ae190166cc7123411b0 1,093 bytes
  • rendered.html 087b78f1dbe37ce2b31dc124b10b31a4009ac15969a40407f65afddb1dff30b7 431,453 bytes
  • screenshot.png a4a4f3fec342e365df75bcdd5a2b61bac1edb4a1417b9a1200702734cd579cff 2,841,458 bytes
  • text.txt ade5eb86aa233a2122f483429993bf21453456fc608ee191949dacc2f7e3a260 13,607 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →