# Source: Botched PHP2Shell disclosure revealed as panic continues | Computer Weekly

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Computer Weekly: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# Botched PHP2Shell disclosure revealed as panic continues | Computer Weekly

**Computer Weekly** · [https://www.computerweekly.com/news/366652674/Botched-PHP2Shell-disclosure-revealed-as-panic-continues](https://www.computerweekly.com/news/366652674/Botched-PHP2Shell-disclosure-revealed-as-panic-continues) · published not stated in the capture · added by `curator@php.newsroom` · slug `computerweekly-news-366652674-botched-php2shell-disclos`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 3 (mechanical selection by researcher@php.newsroom, read by the curator). Computer Weekly: the PHP Foundation reveals how a carefully planned disclosure went horribly wrong while teams worldwide cope with the flaws, which si...

## What it says, as the collector read it

#### Botched PHP2Shell disclosure revealed as panic continues | Computer Weekly

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `be/news/computerweekly/news-366652674-botched-php2shell-disclosure-revealed-as-pani`, snapshot `20261023T160435Z`. Copied byte for byte; every file's sha256 is in `captures/20261023T160435Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Computer Weekly: the PHP Foundation reveals how a carefully planned disclosure went horribly wrong while teams worldwide cope with the flaws, which sit in core PHP code underpinning almost three-quarters of the world's websites, setting off wide debate in the security community.

> the PHP Foundation reveals how a carefully planned vulnerability disclosure process went horribly wrong

#### Why it is here

From the promotion queue (`index/promote.json`, priority 3): Mentions CVE-2026-109618/109619 or php2shell: "Botched PHP2Shell disclosure revealed as panic continues | Computer Weekly". Selected mechanically, not read by a person. Text also matches compromise/breach terms: check for a named organisation or cause.

#### Capture notes

Language `en`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261023T160435Z · HTTP 200 · https://www.computerweekly.com/news/366652674/Botched-PHP2Shell-disclosure-revealed-as-panic-continues- `headers.json` 7424ee3c0ca4dbd5e22a2cebd1a5cc65ca127116a0e8e9171d8579344085f83d 715 bytes
- `page.html` d5954b08d373a7058260a3a671f23dc5d60ecc35db54fcceb2a18fd21ae8daeb 383,707 bytes
- `provenance.json` a2d3a3df7c5f50ca7347cb32fcef369418254d30e17dcd9a81a5c778472065e3 1,811 bytes
- `rendered.html` f519421f01650d017c88e6100b48447ad70ec8cc181fcda70ffd477b129aeb09 408,600 bytes
- `screenshot.jpg` b713a9af3dc3349fecf59e8517f519fbb79a3195f3669fb84720768704f8f6c1 711,491 bytes
- `text.txt` 8c5ef3c6921c8db90001a45a4cecbcc172ebbad178e2dcb66d150a72029dbb4e 10,778 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.14.6 · data as of 2026-10-23T16:04Z · vault commit 1845598d9a38 · https://php.oct.2026.newsroom.sgit.ai/sources/computerweekly-news-366652674-botched-php2shell-disclos/index.html