# Source: PHP2Shell-Sicherheitslücken bedrohen auch Banken und Finanzdienstleister

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

IT Finanzmagazin: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# PHP2Shell-Sicherheitslücken bedrohen auch Banken und Finanzdienstleister

**IT Finanzmagazin** · [https://www.it-finanzmagazin.de/php2shell-sicherheitsluecken-bedrohen-weiterhin-auch-banken-und-finanzdienstleister-252814/](https://www.it-finanzmagazin.de/php2shell-sicherheitsluecken-bedrohen-weiterhin-auch-banken-und-finanzdienstleister-252814/) · published 2026-10-23T05:30:07+00:00 · added by `curator@php.newsroom` · slug `it-finanzmagazin-php2shell-sicherheitsluecken-bedrohen-we`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). IT Finanzmagazin (German), 23 October: the PHP2Shell vulnerabilities also threaten banks and financial service providers. They let attackers run malic...

## What it says, as the collector read it

#### PHP2Shell-Sicherheitslücken bedrohen auch Banken und Finanzdienstleister

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `de/news/it-finanzmagazin/php2shell-sicherheitsluecken-bedrohen-weiterhin-auch-banken`, snapshot `20261023T160435Z`. Copied byte for byte; every file's sha256 is in `captures/20261023T160435Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

IT Finanzmagazin (German), 23 October: the PHP2Shell vulnerabilities also threaten banks and financial service providers. They let attackers run malicious code on web servers without logging in, read confidential information and possibly take full control; for bank customers the flaw does not directly affect their accounts or online banking, nor their own phones and computers, but attackers could through vulnerable web applications possibly obtain credentials and session keys. It names the Shizuoka Bank in Japan as announcing a precautionary, temporary shutdown of its website and banking app, and adds that such shutdowns, in any sector, are not proof of successful attacks but rather of a sensible IT security strategy.

> Für Bankkunden heißt das, dass die Sicherheitslücke nicht unmittelbar ihre Konten oder das Online-Banking in Mitleidenschaft zieht.

_Curator's translation:_ "For bank customers this means that the vulnerability does not directly affect their accounts or online banking."

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell-Sicherheitslücken bedrohen auch Banken und Finanzdienstleister". Selected mechanically, not read by a person.

#### Capture notes

Language `de`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261023T160435Z · HTTP 200 · https://www.it-finanzmagazin.de/php2shell-sicherheitsluecken-bedrohen-weiterhin-auch-banken-und-finanzdienstleister-252814/- `headers.json` 151e327491bd02691fbac079064d65a43f92aba097351319275c4c83184c3bf0 796 bytes
- `page.html` 1dcb38424cbf19d0e581165c98d5edbbfca5c5e3630a051e774ab8d84566d5c7 322,282 bytes
- `provenance.json` 4963156ab7e6c51dceb4b591341db04ce2f3e6266eaf2444ce20787f1096dff6 1,855 bytes
- `rendered.html` 5e573606a9c82794efc2db5e9285b27d565fb9b2864c4f127c2e78680923e56a 329,897 bytes
- `screenshot.jpg` 12180c5b1670a95f056382e7d90e71bb1fb2510718042919a59e37105b4c9154 859,107 bytes
- `text.txt` 9c370ea0d223e2c82ed93afc8e2f860d4089df88fcb3cf3fc0e9904cc1ef516b 11,625 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.0 · data as of 2026-10-25T09:35Z · vault commit 87795d121200 · https://php.oct.2026.newsroom.sgit.ai/sources/it-finanzmagazin-php2shell-sicherheitsluecken-bedrohen-we/index.html