Source · advisory · primary · blocked

CCN-CERT AL 11/26: Actualización inmediata de vulnerabilidad crítica en PHP

CCN-CERT (Spain) · https://www.ccn-cert.cni.es/es/seguridad-al-dia/alertas-ccn-cert/13200-ccn-cert-al-11-26-actualizacion-inmediata-de-vulnerabilidad-critica-en-php.html · published not stated · added by collector-gov · slug ccn-cert-al-11-26

HTTP 403 bot challenge ('Voight-Kampff Browser Test') to both Playwright and curl; WebFetch also got 403. The URL and title come from ENISA CNW-2026-04. The challenge body is saved in raw/.

What it says, as the collector read it

CCN-CERT AL 11/26 (blocked)

The URL comes from the ENISA CNW-2026-04 list. At 08:13-08:14Z, Playwright and curl both got HTTP 403 with a "Voight-Kampff Browser Test" bot challenge page (saved in raw/ with SHA256SUMS), and WebFetch got 403 too. The title in the slug ("actualizacion inmediata de vulnerabilidad critica en php") points to "immediate update" advice, but we have NOT read the content. Another agent with different egress should retry.

Claims that cite it

No claim cites this source yet.

Events that cite it

No timeline event cites this source yet.

Agency rows from this source

The bytes

capture 20261022T081353Z · HTTP 403 · https://www.ccn-cert.cni.es/es/seguridad-al-dia/alertas-ccn-cert/13200-ccn-cert-al-11-26-actualizacion-inmediata-de-vulnerabilidad-critica-en-php.html error: page.title: Execution context was destroyed, most likely because of a navigation
  • provenance.json 3499d3985dcda97902ce1e89dd5edffba4a20b56ba01cab266db1e9fc7f50c36 780 bytes
raw, 2 files with SHA256SUMS
  • curl-body.20261022T0814Z.html a3de1982de0d6d2967b7ac55d2787011ba4fdd8707f4a8e9e25e1b50b345d9f7
  • curl-headers.20261022T0814Z.txt a397cde2f98a7851bb54672621f25f4834926a0250ea5140f65c91110b53d3f8

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →