# Source: PHP 爆出"PHP2Shell"高危漏洞：影响约七成网站，OpenAI 牵头全球协防

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

站长之家: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# PHP 爆出"PHP2Shell"高危漏洞：影响约七成网站，OpenAI 牵头全球协防

**站长之家** · [https://www.chinaz.com/ainews/31789.shtml](https://www.chinaz.com/ainews/31789.shtml) · published not stated in the capture · added by `curator@php.newsroom` · slug `chinaz-ainews-31789-shtml`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Chinaz (Chinese): the headline says PHP has a high-risk 'PHP2Shell' flaw affecting about 70% of websites, with OpenAI leading a global joint defence....

## What it says, as the collector read it

#### PHP 爆出"PHP2Shell"高危漏洞：影响约七成网站，OpenAI 牵头全球协防

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `hk/news/chinaz/ainews-31789-shtml`, snapshot `20261023T160435Z`. Copied byte for byte; every file's sha256 is in `captures/20261023T160435Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Chinaz (Chinese): the headline says PHP has a high-risk 'PHP2Shell' flaw affecting about 70% of websites, with OpenAI leading a global joint defence. It says the two flaws, CVE-2026-109618 and 109619, are CVSS v4.0 9.2; the security firm Calif used OpenAI's GPT-5.6 Sol model to find one key flaw while Google's Wiz reported independently; PHP's maintainers led verification, fixing and release, and OpenAI, Wiz and Cloudflare gave research, technical support and cross-organisation coordination.

> 安全公司 Calif 借 OpenAI 的 GPT-5.6 Sol 模型发现其中一项关键缺陷，谷歌旗下 Wiz 则独立上报

_Curator's translation:_ "The security firm Calif used OpenAI's GPT-5.6 Sol model to find one of the key flaws, while Google's Wiz reported independently"

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ Chinaz summary of OpenAI's announcement: Calif found one flaw with GPT-5.6 Sol and Wiz reported independently, with two months of coordination. It also mentions OpenAI's version-checker tool and a USD 1 billion 'Daybreak for Frontline Defenders' fund.

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP 爆出"PHP2Shell"高危漏洞：影响约七成网站，OpenAI 牵头全球协防". Selected mechanically, not read by a person.

#### Capture notes

Language `zh`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261023T160435Z · HTTP 200 · https://www.chinaz.com/ainews/31789.shtml- `headers.json` 2b5b46986c092b5c567af8b518c8c878037ea689cf707d0ada9bc7bb50b6c7ad 498 bytes
- `page.html` e8bf6c95ad29c4e4ad01fd162ef0b5bd07e0e65e284d9768361d880d06e53f0a 110,032 bytes
- `provenance.json` d5f4df92fadbfbd706371b1d0529af17ea0e10363838fa0260272d2fc3eb0060 1,572 bytes
- `rendered.html` e1e82d58b5362dfb11c4149a49b3716f5158942298e52b87c3326a464de74108 150,005 bytes
- `screenshot.jpg` 77af3fdeaab31eb407f70dfcb6b61de514a25a319da67367b7c3a47d0b178d62 333,038 bytes
- `text.txt` a0e6e63a1fa7ba44995721cf3b357235a3d037ae44aef02b2560b827aa828122 8,310 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.18.2 · data as of 2026-10-24T16:05Z · vault commit 8c16a64a7cf6 · https://php.oct.2026.newsroom.sgit.ai/sources/chinaz-ainews-31789-shtml/index.html