# Source: PHP2Shell: Two Critical PHP Flaws Allow Unauthenticated Remote Code Execution | SECURITY.COM

Broadcom (Symantec) Security: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · vendor · secondary · captured

# PHP2Shell: Two Critical PHP Flaws Allow Unauthenticated Remote Code Execution | SECURITY.COM

**Broadcom (Symantec) Security** · [https://www.security.com/blog-post/php2shell-critical-vulns-cve-2026-109618-109619](https://www.security.com/blog-post/php2shell-critical-vulns-cve-2026-109618-109619) · published 2026-10-21 · added by `claude-story-site` · slug `broadcom-security-php2shell`

Vendor explainer.

## What it says, as the collector read it

#### PHP2Shell: Two Critical PHP Flaws Allow Unauthenticated Remote Code Execution | SECURITY.COM

Captured by claude-story-site. Status: captured. Vendor explainer.

- Captured for the record.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261022T112608Z · HTTP 200 · https://www.security.com/blog-post/php2shell-critical-vulns-cve-2026-109618-109619- `headers.json` 90e7e97292b84a9655eb632719cd295101372dea8bfbbea1c37cac21f29c6083 2,018 bytes
- `page.html` ee4999fb83f9cd38b29e33384e6cd904f855429326277bbcaaaa0b5796879cf8 329,468 bytes
- `provenance.json` c676441507e6939f7a352231caebe725dfa363ad55108ae190166cc7123411b0 1,093 bytes
- `rendered.html` 087b78f1dbe37ce2b31dc124b10b31a4009ac15969a40407f65afddb1dff30b7 431,453 bytes
- `screenshot.png` a4a4f3fec342e365df75bcdd5a2b61bac1edb4a1417b9a1200702734cd579cff 2,841,458 bytes
- `text.txt` ade5eb86aa233a2122f483429993bf21453456fc608ee191949dacc2f7e3a260 13,607 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.2.5 · data as of 2026-10-22T11:34Z · vault commit 200d08971937 · https://php.oct.2026.newsroom.sgit.ai/sources/broadcom-security-php2shell/index.html