# Source: OpenAI 发现 PHP「世纪漏洞」，全球 70% 网站都危险了_新浪科技_新浪网

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

新浪财经: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# OpenAI 发现 PHP「世纪漏洞」，全球 70% 网站都危险了_新浪科技_新浪网

**新浪财经** · [https://finance.sina.com.cn/tech/roll/2026-10-22/doc-iniwcaff5189430.shtml](https://finance.sina.com.cn/tech/roll/2026-10-22/doc-iniwcaff5189430.shtml) · published 2026-10-22T19:19:18+08:00 · added by `curator@php.newsroom` · slug `finance-sina-tech-roll-2026-10-22-doc-iniwcaff5189430`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Sina Finance (Chinese), 22 October: OpenAI found a PHP 'flaw of the century' and 70% of websites worldwide are at risk. Two days earlier the informati...

## What it says, as the collector read it

#### OpenAI 发现 PHP「世纪漏洞」，全球 70% 网站都危险了_新浪科技_新浪网

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `cn/news/finance-sina/tech-roll-2026-10-22-doc-iniwcaff5189430-shtml`, snapshot `20261023T160435Z`. Copied byte for byte; every file's sha256 is in `captures/20261023T160435Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Sina Finance (Chinese), 22 October: OpenAI found a PHP 'flaw of the century' and 70% of websites worldwide are at risk. Two days earlier the information on two high-risk remote-execution flaws codenamed PHP2Shell leaked unexpectedly; the PHP Foundation rates both 9.2 out of 10. It places the event among earlier incidents where a problem in system infrastructure affected many unrelated services.

> 这次爆出的两个漏洞，对应编号分别为 CVE-2026-109618 和 CVE-2026-109619，PHP 基金会给它们定下的严重程度评分达到 9.2 分（满分 10 分）。

_Curator's translation:_ "The two vulnerabilities exposed this time have the identifiers CVE-2026-109618 and CVE-2026-109619, and the PHP Foundation gave them a severity score of 9.2 out of 10."

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ Page was down at capture; no text. The title says OpenAI found a 'century bug' in PHP that endangers 70% of websites worldwide.

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "OpenAI 发现 PHP「世纪漏洞」，全球 70% 网站都危险了_新浪科技_新浪网". Selected mechanically, not read by a person.

#### Capture notes

Language `zh`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261023T160435Z · HTTP 200 · https://finance.sina.com.cn/tech/roll/2026-10-22/doc-iniwcaff5189430.shtml- `headers.json` 704ad2ca5b1bb257266951211d9ec5a3a61f767d4701535a1c9019766454ea06 1,400 bytes
- `page.html` 61af69bae7d24210c53e78ba76a05dab88d65073e91e0eee2e237a4cb5f3193c 121,966 bytes
- `provenance.json` d960354ec8369469ead6219415f4b10797bbc4b4be6e55abae7475c73cab30b5 1,741 bytes
- `rendered.html` fac3a680fb51175664d7428af47ca6602f1d3ae1e091326ac8f7f230238f5056 123,166 bytes
- `screenshot.jpg` 23954f5d351351e34b1bfc4366c16ece3569f5f70ab7e79b2e62b31d3de5cbd8 62,232 bytes
- `text.txt` a474233db211afbb34f3aee62b3bd9a33bf9547a2321e7e8c1a93ce150443972 9,943 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.18.2 · data as of 2026-10-24T16:05Z · vault commit 8c16a64a7cf6 · https://php.oct.2026.newsroom.sgit.ai/sources/finance-sina-tech-roll-2026-10-22-doc-iniwcaff5189430/index.html