# Source: PHP2Shell : une faille majeure dans PHP activement exploitée avant la disponibilité du correctif - ITdaily

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

ITdaily: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# PHP2Shell : une faille majeure dans PHP activement exploitée avant la disponibilité du correctif - ITdaily

**ITdaily** · [https://itdaily.fr/blogs/logiciel/php2shell-bug-php/](https://itdaily.fr/blogs/logiciel/php2shell-bug-php/) · published 2026-10-21T13:55:56+02:00 · added by `curator@php.newsroom` · slug `itdaily-blogs-logiciel-php2shell-bug-php`

Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). ITdaily (French edition), 21 October, updated 16:38: a major PHP flaw actively exploited before the fix was available. PHP shared the patches slightly...

## What it says, as the collector read it

#### PHP2Shell : une faille majeure dans PHP activement exploitée avant la disponibilité du correctif - ITdaily

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`, read from its pack copy `7r83qic5`), page `fr/news/itdaily/blogs-logiciel-php2shell-bug-php`, snapshot `20261023T160435Z`. Copied byte for byte; every file's sha256 is in `captures/20261023T160435Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

ITdaily (French edition), 21 October, updated 16:38: a major PHP flaw actively exploited before the fix was available. PHP shared the patches slightly earlier than planned for the vulnerabilities that had leaked earlier; nearly 70% of all websites are concerned; the two critical flaws were already being actively abused; the fixed versions are 8.5.12, 8.4.27, 8.3.36 and 8.2.35.

> L’exploitation active a commencé avant même la disponibilité du correctif, lequel est désormais publié.

_Curator's translation:_ "Active exploitation began even before the fix was available, which has now been published."

_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ ITdaily (Belgium) explains the flaws and quotes Eye Security's Vaisha Bernard. It reports that Belgian host Combell patched before public release, and that DPG Media, the VUB and some hospitals went offline. The CCB recommended going offline and put its own site into maintenance.

#### Why it is here

From the promotion queue (`index/promote.json`, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell : une faille majeure dans PHP activement exploitée avant la disponibilité du correctif - ITdaily". Selected mechanically, not read by a person.

#### Capture notes

Language `fr`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261023T160435Z · HTTP 200 · https://itdaily.fr/blogs/logiciel/php2shell-bug-php/- `headers.json` fc4bc78b399501edb3e7dd3f60cfb24d8be4d1959cf9a4020fb9070fed077262 643 bytes
- `page.html` f2a5fe735d6b54ca798a1765dd09f96268a6c756ad9d2aa4e15d35810f599e8e 114,364 bytes
- `provenance.json` 3ad577b312b0a9b49db5d0b776e849ec361aaf334e878e3d8bf2977880d7ac29 1,661 bytes
- `rendered.html` 6cb2162cb57181e8d106383d80e3e5e38d93ca7960293df9e8140b28c9be6bb6 116,843 bytes
- `screenshot.jpg` a2f5c873be763d078f711b06703760c141a7b90d3470c610f546aa4f9e14a0b1 641,339 bytes
- `text.txt` 6f61aceea38ee7638b3c7ebf0e1e0a2c4b868cfb0b7bb53ad9e6319e8603a45b 11,129 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.22.0 · data as of 2026-10-25T09:35Z · vault commit 87795d121200 · https://php.oct.2026.newsroom.sgit.ai/sources/itdaily-blogs-logiciel-php2shell-bug-php/index.html