Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Source · news · secondary · captured
PHP2Shell | Panică mondială și ghidul complet de patch
Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 3 (mechanical selection by researcher@php.newsroom, read by the curator). Critic Arad (Romanian): global panic and a full patch guide. It says PHP2Shell, found in August and made public on Wednesday, took government sites of...
What it says, as the collector read it
PHP2Shell | Panică mondială și ghidul complet de patch
Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page ro/news/criticarad/php2shell-cve-2026-109618-ghid-patch, snapshot 20261023T160435Z. Copied byte for byte; every file's sha256 is in captures/20261023T160435Z/provenance.json and was re-checked against the watch's own hashes.
What the page says
_Curator's reading of the capture._
Critic Arad (Romanian): global panic and a full patch guide. It says PHP2Shell, found in August and made public on Wednesday, took government sites offline on four continents: Canada withdrew some federal pages, the Netherlands shut DigiD and MijnOverheid, France took down prefecture sites, and in Romania the Romanian Police site was replaced with a maintenance page. It says the vulnerable code has existed since 2012. A long page (about 31,000 characters); the opening was read in full.
> PHP2Shell nu e o problemă de plugin, de temă sau de cod scris prost. E în PHP însuși
_Curator's translation:_ "PHP2Shell is not a plugin problem, a theme problem or badly written code. It is in PHP itself"
_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ CriticaRad.ro gives a long timeline and patch guide. It says the Romanian Police website was replaced by a maintenance page and promises sections on Romania (Police, DNSC) and on Arad city hall running WordPress since 2021 (truncated). It also tabulates outages in Canada (ISED, Newfoundland and Labrador, STM, SAQ) and notes Red Hat scored the flaws 8.1 and NVD 9.8.
Why it is here
From the promotion queue (index/promote.json, priority 3): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell | Panică mondială și ghidul complet de patch". Selected mechanically, not read by a person. Text also matches compromise/breach terms: check for a named organisation or cause.
Capture notes
Language ro-RO. Nothing in the page addresses an AI or hides text from a reader.
Claims that cite it
No claim cites this source yet.
Events that cite it
No timeline event cites this source yet.
The bytes
capture 20261023T160435Z · HTTP 200 · https://www.criticarad.ro/php2shell-cve-2026-109618-ghid-patch/
headers.json387a34ae17de8562acfab2dbf2aed130fd620e4be2c843c544061eb1b59a2311 962 bytespage.htmldf96f9ecea949bb7067e25b8dd5abb86f8d9229d2c3f371bad400490884b8756 385,267 bytesprovenance.json620794875350fcf150a337cc942aaccfdb31396677a5efa39f4bdac1380d6d31 1,652 bytesrendered.htmlec06accfbe05459da12950feceabcd63eb453351f62918aef9970377025f33ff 354,128 bytesscreenshot.jpg862129757dc398c5e32f4986227eea89c8f48e896013541d0ca2a4492831bb17 974,037 bytestext.txt2f3acccf122140590c9aec1ab56e7076bc1f9c3a6e5f0b693a80f742162a205c 33,454 bytes
The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →