# Source: Deux failles critiques menacent des millions de sites PHP, une mise à jour d’urgence arrive ce mercredi après-midi

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Clubic: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# Deux failles critiques menacent des millions de sites PHP, une mise à jour d’urgence arrive ce mercredi après-midi

**Clubic** · [https://www.clubic.com/actualite-635179-deux-failles-critiques-menacent-des-millions-de-sites-php-une-mise-a-jour-d-urgence-arrive-ce-mercredi-apres-midi.html](https://www.clubic.com/actualite-635179-deux-failles-critiques-menacent-des-millions-de-sites-php-une-mise-a-jour-d-urgence-arrive-ce-mercredi-apres-midi.html) · published 2026-10-21T09:31:00+02:00 · added by `curator@php.newsroom` · slug `clubic-actualite-635179-deux-failles-critiques`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261024T083755Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Clubic (French), 21 October morning, before the patches: two critical flaws threaten millions of PHP sites and an emergency update was due that Wednes...

## What it says, as the collector read it

#### Deux failles critiques menacent des millions de sites PHP, une mise à jour d’urgence arrive ce mercredi après-midi

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `ch/news/clubic/actualite-635179-deux-failles-critiques-menacent-des-million`, snapshot `20261024T083755Z`. Copied byte for byte; every file's sha256 is in `captures/20261024T083755Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Clubic (French), 21 October morning, before the patches: two critical flaws threaten millions of PHP sites and an emergency update was due that Wednesday afternoon. It explains the CVE IDs for non-specialists and says the flaws would be remote code execution.

> Les deux failles sont référencées CVE-2026-109618 et CVE-2026-109619.

_Curator's translation:_ "The two flaws are referenced CVE-2026-109618 and CVE-2026-109619."

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ Clubic's pre-release article (21 Oct morning) says PHP will ship an emergency fix at 16:00 Paris time after a Hacker News leak. It warns that PHP 5 and 7 sites may be left without a fix, citing W3Techs shares.

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Deux failles critiques menacent des millions de sites PHP, une mise à jour d’urgence arrive ce mercredi après-midi". Selected mechanically, not read by a person.

#### Capture notes

Language `fr`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261024T083755Z · HTTP 200 · https://www.clubic.com/actualite-635179-deux-failles-critiques-menacent-des-millions-de-sites-php-une-mise-a-jour-d-urgence-arrive-ce-mercredi-apres-midi.html- `headers.json` 68db3b6b764b35a903ba82540af4702ff624d070b7e0723db4dfd9ab6c7115c8 1,719 bytes
- `page.html` 7bf62bca66711fcbc9275b3eb344c68e4aa0235065f8ddc9ebd822a785d7d260 557,505 bytes
- `provenance.json` 0894c076bd542d79a8a4faff959ca7d101beeeddd362799395d687896e39f73e 1,793 bytes
- `text.txt` b134c1a3bfa65288771be5f10ec50b6f407d5683e21a3b7a2f18df9b971b7de3 8,059 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.18.2 · data as of 2026-10-24T16:05Z · vault commit 8c16a64a7cf6 · https://php.oct.2026.newsroom.sgit.ai/sources/clubic-actualite-635179-deux-failles-critiques/index.html