# Source: Avviso per gli exchange di crypto: una grave vulnerabilità PHP mette a rischio i siti di pagamento

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

Yahoo Finanza: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# Avviso per gli exchange di crypto: una grave vulnerabilità PHP mette a rischio i siti di pagamento

**Yahoo Finanza** · [https://it.finance.yahoo.com/notizie/avviso-per-gli-exchange-di-224238845.html](https://it.finance.yahoo.com/notizie/avviso-per-gli-exchange-di-224238845.html) · published not stated in the capture · added by `curator@php.newsroom` · slug `it-finance-yahoo-notizie-avviso-per-gli-exchange-di-22423`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). Yahoo Finanza (Italian), a notice for crypto exchanges: a serious PHP vulnerability puts payment sites at risk. On Wednesday 21 October the PHP develo...

## What it says, as the collector read it

#### Avviso per gli exchange di crypto: una grave vulnerabilità PHP mette a rischio i siti di pagamento

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `it/news/it-finance-yahoo/notizie-avviso-per-gli-exchange-di-224238845-html`, snapshot `20261023T160435Z`. Copied byte for byte; every file's sha256 is in `captures/20261023T160435Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Yahoo Finanza (Italian), a notice for crypto exchanges: a serious PHP vulnerability puts payment sites at risk. On Wednesday 21 October the PHP developers released emergency patches for two vulnerabilities known as PHP2Shell, rated 9.2 out of 10; the page stresses these are assessments of potential exposure and that it has not been verified that the payment providers cited or the main exchanges were compromised through PHP2Shell.

> Non è stato verificato che i provider di pagamento citati o i principali exchange siano stati compromessi tramite PHP2Shell.

_Curator's translation:_ "It has not been verified that the payment providers cited or the main exchanges were compromised through PHP2Shell."

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ Yahoo Finanza (a BeInCrypto translation) says PHP2Shell puts crypto payment gateways, small exchanges and DeFi front-ends at risk. It names WooCommerce integrations of Binance Pay, Crypto.com Pay, BitPay, CoinGate and CoinPayments as potential exposure.

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "Avviso per gli exchange di crypto: una grave vulnerabilità PHP mette a rischio i siti di pagamento". Selected mechanically, not read by a person.

#### Capture notes

Language `it-IT`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261023T160435Z · HTTP 200 · https://it.finance.yahoo.com/notizie/avviso-per-gli-exchange-di-224238845.html- `headers.json` 14b530caf70b8055757198eed4edac7690c7aa2ab491e7e8687687bf1a1d5f8a 31,973 bytes
- `page.html` 8d4fdce54a79d0278bce072fd149868819c27fba111211d83f0878f2ca31493e 358,322 bytes
- `provenance.json` cae9669db6a1998cee4738ab882a555767e3b79a45818e2d512863857dbc0984 1,773 bytes
- `rendered.html` 4daec8f5f4250e80489c770ce967ea917c187f814840da3dd4bd19e62d47dec1 426,581 bytes
- `screenshot.jpg` 44a38b539889ea4a8d4cd4905314c8ed3ffb686fe1a749e4937159c7ff6934ee 327,943 bytes
- `text.txt` e51ded94e469d4867f3136a2efadb8261a9e7849aa31e73bb75fca0b05243c07 4,330 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.0 · data as of 2026-10-25T09:35Z · vault commit 87795d121200 · https://php.oct.2026.newsroom.sgit.ai/sources/it-finance-yahoo-notizie-avviso-per-gli-exchange-di-22423/index.html