# Source: 에버스핀, PHP 치명적 취약점 공격 차단 규칙 적용…“공식 패치 전 대응”

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

헬로티: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# 에버스핀, PHP 치명적 취약점 공격 차단 규칙 적용…“공식 패치 전 대응”

**헬로티** · [https://www.hellot.net/mobile/article.html?no=115738](https://www.hellot.net/mobile/article.html?no=115738) · published not stated in the capture · added by `curator@php.newsroom` · slug `hellot-mobile-article-html`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T232528Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). HelloT (Korean): the Korean vendor Eversafe (Everspin) says it applied a blocking rule for CVE-2026-109618 and CVE-2026-109619 to its web-security Saa...

## What it says, as the collector read it

#### 에버스핀, PHP 치명적 취약점 공격 차단 규칙 적용…“공식 패치 전 대응”

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `kr/news/hellot/mobile-article-html`, snapshot `20261023T232528Z`. Copied byte for byte; every file's sha256 is in `captures/20261023T232528Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

HelloT (Korean): the Korean vendor Eversafe (Everspin) says it applied a blocking rule for CVE-2026-109618 and CVE-2026-109619 to its web-security SaaS customers' services before the official PHP patch was released, blocking attack requests at the gateway. Vendor announcement.

> 에버스핀은 PHP 취약점 CVE-2026-109618과 CVE-2026-109619에 대응해 자사 웹 보안 솔루션 ‘Eversafe for Web SaaS’ 고객 서비스에 차단 규칙을 적용했다고 밝혔다.

_Curator's translation:_ "Everspin said it applied a blocking rule to its customers' services on its web security solution 'Eversafe for Web SaaS' in response to the PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "에버스핀, PHP 치명적 취약점 공격 차단 규칙 적용…“공식 패치 전 대응”". Selected mechanically, not read by a person.

#### Capture notes

Language `ko`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261023T232528Z · HTTP 200 · https://www.hellot.net/mobile/article.html?no=115738- `headers.json` 8f27567eebb8bd527620ba121c3ec4c1c421c1b76d91870f396e25656ebf6510 898 bytes
- `page.html` a9cd6fe2b739c3e610de66a8944e405b2ed509c434b8c098453975572f6f6736 60,722 bytes
- `provenance.json` 65b44057cf3c28e1d83343480a21c7fadfab02c9f5c27d12551c18b6b6e4c2ad 1,607 bytes
- `rendered.html` b668310d0341a4cc301cca6f403626f02bba4fa364350d6d62eeec83ddfc3bcc 70,511 bytes
- `screenshot.jpg` e99732f9ac0a29b0795e879d982e0bb22ebc21a761ab59d6b4824224fbf05616 403,367 bytes
- `text.txt` ba8cd797bd851f3f42a88107c5be3afd9e5d3d6538e3e2d0f9a0ea46bf9c38a4 6,226 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.0 · data as of 2026-10-25T09:35Z · vault commit 87795d121200 · https://php.oct.2026.newsroom.sgit.ai/sources/hellot-mobile-article-html/index.html