# Source: Patch PHP2Shell Sudah Terbit, Ini Versi Aman dan Cara Update

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

CNBC Indonesia: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# Patch PHP2Shell Sudah Terbit, Ini Versi Aman dan Cara Update

**CNBC Indonesia** · [https://www.cnbcindonesia.com/tech/20261022094711-37-778474/patch-php2shell-sudah-terbit-ini-versi-aman-dan-cara-update](https://www.cnbcindonesia.com/tech/20261022094711-37-778474/patch-php2shell-sudah-terbit-ini-versi-aman-dan-cara-update) · published not stated in the capture · added by `curator@php.newsroom` · slug `cnbcindonesia-tech-20261022094711-37-778474-patch-php2`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). CNBC Indonesia, 22 October: the PHP developers officially released emergency security updates for PHP2Shell, which lets attackers run malicious code r...

## What it says, as the collector read it

#### Patch PHP2Shell Sudah Terbit, Ini Versi Aman dan Cara Update

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `id/news/cnbcindonesia/tech-20261022094711-37-778474-patch-php2shell-sudah-terbit-i`, snapshot `20261023T160435Z`. Copied byte for byte; every file's sha256 is in `captures/20261023T160435Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

CNBC Indonesia, 22 October: the PHP developers officially released emergency security updates for PHP2Shell, which lets attackers run malicious code remotely without a password or account. Both flaws score 9.2 out of 10 and can hit the server directly before page code runs; the Apache mod_php configuration is judged most at risk because a simple unauthenticated request is enough.

> Tim pengembang PHP resmi merilis pembaruan keamanan darurat untuk menutup celah kritis yang dikenal sebagai PHP2Shell.

_Curator's translation:_ "The PHP development team officially released an emergency security update to close the critical hole known as PHP2Shell."

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ CNBC Indonesia explainer: the PHP2Shell patch is out. It lists the safe versions and gives generic steps for checking and updating PHP (cPanel MultiPHP, php -v, backups, contacting the hosting provider).

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Patch PHP2Shell Sudah Terbit, Ini Versi Aman dan Cara Update". Selected mechanically, not read by a person.

#### Capture notes

Language `id`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261023T160435Z · HTTP 200 · https://www.cnbcindonesia.com/tech/20261022094711-37-778474/patch-php2shell-sudah-terbit-ini-versi-aman-dan-cara-update- `headers.json` a03f42b67d1f9de9b63249cf584d974139cc745c4753f0b018d30dfd82025f68 812 bytes
- `page.html` 0e97d4d5e97802b7fefe61bbacb5aff445585c9aa8c682ef972b6d6b4afe7920 142,071 bytes
- `provenance.json` 665aa8630628423749802d46715182c544290702fc9fb2e3162174dd25da894c 1,828 bytes
- `rendered.html` 6171c9538a527d8c93c7e9b36fcd72d05cb893c6d0e4b32313942a82ff8d2bed 168,395 bytes
- `screenshot.jpg` 5bee30e0fb5998156a8357c9c69e6e4f4ab51e6b1daea2a872fcaccdb85175a3 430,542 bytes
- `text.txt` 806fdcd92e6eab96304c63f573ee63d5b41bc527f98bfa1e964115a7cb59075e 4,854 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.18.2 · data as of 2026-10-24T16:05Z · vault commit 8c16a64a7cf6 · https://php.oct.2026.newsroom.sgit.ai/sources/cnbcindonesia-tech-20261022094711-37-778474-patch-php2/index.html