# Source: CCN-CERT AL 11/26: Actualización inmediata de vulnerabilidad crítica en PHP

CCN-CERT (Spain): what it says, the claims and events that cite it, and the hashes of every captured file.

Source · advisory · primary · blocked

# CCN-CERT AL 11/26: Actualización inmediata de vulnerabilidad crítica en PHP

**CCN-CERT (Spain)** · [https://www.ccn-cert.cni.es/es/seguridad-al-dia/alertas-ccn-cert/13200-ccn-cert-al-11-26-actualizacion-inmediata-de-vulnerabilidad-critica-en-php.html](https://www.ccn-cert.cni.es/es/seguridad-al-dia/alertas-ccn-cert/13200-ccn-cert-al-11-26-actualizacion-inmediata-de-vulnerabilidad-critica-en-php.html) · published not stated · added by `collector-gov` · slug `ccn-cert-al-11-26`

HTTP 403 bot challenge ('Voight-Kampff Browser Test') to both Playwright and curl; WebFetch also got 403. The URL and title come from ENISA CNW-2026-04. The challenge body is saved in raw/.

## What it says, as the collector read it

#### CCN-CERT AL 11/26 (blocked)

The URL comes from the ENISA CNW-2026-04 list. At 08:13-08:14Z, Playwright and curl both got HTTP 403 with a "Voight-Kampff Browser Test" bot challenge page (saved in raw/ with SHA256SUMS), and WebFetch got 403 too. The title in the slug ("actualizacion inmediata de vulnerabilidad critica en php") points to "immediate update" advice, but we have NOT read the content. Another agent with different egress should retry.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

### Agency rows from this source
- [CCN-CERT](../../agencies/index.html): offline unknown

## The bytes
capture 20261022T081353Z · HTTP 403 · https://www.ccn-cert.cni.es/es/seguridad-al-dia/alertas-ccn-cert/13200-ccn-cert-al-11-26-actualizacion-inmediata-de-vulnerabilidad-critica-en-php.html error: page.title: Execution context was destroyed, most likely because of a navigation- `provenance.json` 3499d3985dcda97902ce1e89dd5edffba4a20b56ba01cab266db1e9fc7f50c36 780 bytes
raw, 2 files with SHA256SUMS- `curl-body.20261022T0814Z.html` a3de1982de0d6d2967b7ac55d2787011ba4fdd8707f4a8e9e25e1b50b345d9f7
- `curl-headers.20261022T0814Z.txt` a397cde2f98a7851bb54672621f25f4834926a0250ea5140f65c91110b53d3f8

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.2.8 · data as of 2026-10-22T11:34Z · vault commit 200d08971937 · https://php.oct.2026.newsroom.sgit.ai/sources/ccn-cert-al-11-26/index.html