Crypto Firms Say They Don't Use PHP After Critical PHP2Shell Flaw

Crypto Firms Say They Don't Use PHP After Critical PHP2Shell Flaw

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page ua/news/coingape/crypto-firms-say-they-dont-use-php-after-critical-php2shell, snapshot 20261023T160435Z. Copied byte for byte; every file's sha256 is in captures/20261023T160435Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

Coingape: crypto firms say they do not use PHP after the PHP2Shell flaws. Restates the two flaws, both CVSS 9.2, enabling unauthenticated remote code execution on PHP servers. A crypto-news angle.

> Two critical PHP2Shell flaws (CVE-2026-109618 and CVE-2026-109619), both rated CVSS 9.2, enable unauthenticated remote code execution on PHP servers.

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ CoinGape (English, crypto news) reports on PHP2Shell's crypto impact. Binance co-founder CZ urged caution; BNB Chain and Trust Wallet said their stacks don't use PHP; Kraken migrated its backend to Rust in 2025; SlowMist scanned the industry's PHP assets.

Why it is here

From the promotion queue (index/promote.json, priority 3): Mentions CVE-2026-109618/109619 or php2shell: "Crypto Firms Say They Don't Use PHP After Critical PHP2Shell Flaw". Selected mechanically, not read by a person. Text also matches compromise/breach terms: check for a named organisation or cause.

Capture notes

Language en. Nothing in the page addresses an AI or hides text from a reader.