# Source: PHP2Shell | Panică mondială și ghidul complet de patch

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Critic Arad: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# PHP2Shell | Panică mondială și ghidul complet de patch

**Critic Arad** · [https://www.criticarad.ro/php2shell-cve-2026-109618-ghid-patch/](https://www.criticarad.ro/php2shell-cve-2026-109618-ghid-patch/) · published 2026-10-22T12:02:38+03:00 · added by `curator@php.newsroom` · slug `criticarad-php2shell-cve-2026-109618-ghid-patch`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 3 (mechanical selection by researcher@php.newsroom, read by the curator). Critic Arad (Romanian): global panic and a full patch guide. It says PHP2Shell, found in August and made public on Wednesday, took government sites of...

## What it says, as the collector read it

#### PHP2Shell | Panică mondială și ghidul complet de patch

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `ro/news/criticarad/php2shell-cve-2026-109618-ghid-patch`, snapshot `20261023T160435Z`. Copied byte for byte; every file's sha256 is in `captures/20261023T160435Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Critic Arad (Romanian): global panic and a full patch guide. It says PHP2Shell, found in August and made public on Wednesday, took government sites offline on four continents: Canada withdrew some federal pages, the Netherlands shut DigiD and MijnOverheid, France took down prefecture sites, and in Romania the Romanian Police site was replaced with a maintenance page. It says the vulnerable code has existed since 2012. A long page (about 31,000 characters); the opening was read in full.

> PHP2Shell nu e o problemă de plugin, de temă sau de cod scris prost. E în PHP însuși

_Curator's translation:_ "PHP2Shell is not a plugin problem, a theme problem or badly written code. It is in PHP itself"

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ CriticaRad.ro gives a long timeline and patch guide. It says the Romanian Police website was replaced by a maintenance page and promises sections on Romania (Police, DNSC) and on Arad city hall running WordPress since 2021 (truncated). It also tabulates outages in Canada (ISED, Newfoundland and Labrador, STM, SAQ) and notes Red Hat scored the flaws 8.1 and NVD 9.8.

#### Why it is here

From the promotion queue (`index/promote.json`, priority 3): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell | Panică mondială și ghidul complet de patch". Selected mechanically, not read by a person. Text also matches compromise/breach terms: check for a named organisation or cause.

#### Capture notes

Language `ro-RO`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261023T160435Z · HTTP 200 · https://www.criticarad.ro/php2shell-cve-2026-109618-ghid-patch/- `headers.json` 387a34ae17de8562acfab2dbf2aed130fd620e4be2c843c544061eb1b59a2311 962 bytes
- `page.html` df96f9ecea949bb7067e25b8dd5abb86f8d9229d2c3f371bad400490884b8756 385,267 bytes
- `provenance.json` 620794875350fcf150a337cc942aaccfdb31396677a5efa39f4bdac1380d6d31 1,652 bytes
- `rendered.html` ec06accfbe05459da12950feceabcd63eb453351f62918aef9970377025f33ff 354,128 bytes
- `screenshot.jpg` 862129757dc398c5e32f4986227eea89c8f48e896013541d0ca2a4492831bb17 974,037 bytes
- `text.txt` 2f3acccf122140590c9aec1ab56e7076bc1f9c3a6e5f0b693a80f742162a205c 33,454 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.14.6 · data as of 2026-10-23T16:04Z · vault commit 1845598d9a38 · https://php.oct.2026.newsroom.sgit.ai/sources/criticarad-php2shell-cve-2026-109618-ghid-patch/index.html