PHP2Shell: des milliers de serveurs vulnérables, des attaques déjà tentées (update) | ICTjournal

PHP2Shell: des milliers de serveurs vulnérables, des attaques déjà tentées (update) | ICTjournal

Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page ch/news/ictjournal/news-2026-10-22-deux-failles-critiques-dans-php-provoquent-u, snapshot 20261023T160435Z. Copied byte for byte; every file's sha256 is in captures/20261023T160435Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

ICTjournal (French, Switzerland), updated 23 October: thousands of servers remained exposed on 22 October. The firm Risikomonitor examined nearly 690,000 servers linked to Switzerland on 22 October and found just over 23,000 (about 3.5%) still affected; the real number could be higher because the PHP version cannot always be determined, and VirusTotal data points the same way. Exploitation attempts were also observed.

> Elle a identifié un peu plus de 23’000 serveurs encore concernés par PHP2Shell, soit environ 3,5%.

_Curator's translation:_ "It identified a little over 23,000 servers still affected by PHP2Shell, about 3.5%."

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ ICTjournal summarises the global mobilisation: Cloudflare's attack numbers, Reuters on European takedowns, and the PHP Foundation's admission that the root defect was seen in 2024. It adds that Switzerland's OFCS warned and that UNIGE and EPFL went offline.

Why it is here

From the promotion queue (index/promote.json, priority 3): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell: des milliers de serveurs vulnérables, des attaques déjà tentées (update) | ICTjournal". Selected mechanically, not read by a person. Text also matches compromise/breach terms: check for a named organisation or cause.

Capture notes

Language fr. Nothing in the page addresses an AI or hides text from a reader.