# Source: PHP2Shell : deux failles critiques PHP corrigées en urgence

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Coin Academy: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# PHP2Shell : deux failles critiques PHP corrigées en urgence

**Coin Academy** · [https://coinacademy.fr/actu/php-php2shell-frailles-critiques-urgence/](https://coinacademy.fr/actu/php-php2shell-frailles-critiques-urgence/) · published 2026-10-21T11:50:03+00:00 · added by `curator@php.newsroom` · slug `coinacademy-actu-php-php2shell-frailles-critiques-ur`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Coin Academy (French), 21 October, before the patches: two critical PHP flaws and an emergency fix expected that Wednesday. It says watchTowr's resear...

## What it says, as the collector read it

#### PHP2Shell : deux failles critiques PHP corrigées en urgence

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `fr/news/coinacademy/actu-php-php2shell-frailles-critiques-urgence`, snapshot `20261023T160435Z`. Copied byte for byte; every file's sha256 is in `captures/20261023T160435Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Coin Academy (French), 21 October, before the patches: two critical PHP flaws and an emergency fix expected that Wednesday. It says watchTowr's researchers state they are remote code execution flaws where an attacker could take control of a server without access, and that no exploitation had been reported at that stage.

> Les chercheurs de watchTowr affirment qu’il s’agit de failles d’exécution de code à distance (RCE)

_Curator's translation:_ "watchTowr's researchers say these are remote code execution (RCE) flaws"

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T171501Z, not necessarily this one):_ CoinAcademy's pre-release explainer (21 Oct) covers the Hacker News leak, watchTowr's confirmation, unconfirmed version claims and the expected version numbers. It cites a Mallory/Shodan count of exposed servers running PHP 8.1 or older.

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell : deux failles critiques PHP corrigées en urgence". Selected mechanically, not read by a person.

#### Capture notes

Language `fr`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261023T160435Z · HTTP 200 · https://coinacademy.fr/actu/php-php2shell-frailles-critiques-urgence/- `headers.json` f7d2e3ac2dd840128ed5ac087cb883eed0305cf54399ba5730ecfd6fe03f47f6 1,302 bytes
- `page.html` dd0fcdb37cecd2a25cde8e35e00890e9e8bf44c1eb0a6651eb3472da95d72ec0 880,640 bytes
- `provenance.json` cec84f837e7f9ffcbd6b4257e30ded7d95dcbf019f2b804736fa0d334fa6ea06 1,693 bytes
- `rendered.html` 04c86ac9d1ae9067533f91ee80390adc27589e92b585c8b914b3ab745c11c2d3 898,783 bytes
- `screenshot.jpg` e1eaea9582fee9ad2fd66b215fcb060bf25dd0da69b95abe6b67392254b5f7fd 816,782 bytes
- `text.txt` 2592cf0c08c277858d6cda3b50a31cb0087cb8d01865f60b2ca7815ba8a1e712 11,647 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.18.2 · data as of 2026-10-24T16:05Z · vault commit 8c16a64a7cf6 · https://php.oct.2026.newsroom.sgit.ai/sources/coinacademy-actu-php-php2shell-frailles-critiques-ur/index.html