Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Source · news · secondary · captured
PHP2Shell security flaw forces thousands of Nepali websites offline
Promoted from the source watch (pack copy 7r83qic5), snapshot 20261025T093507Z, queue priority 4 (mechanical selection by researcher@php.newsroom, read by the curator). The Kathmandu Post, 25 October: PHP2Shell forced thousands of Nepali websites offline. The PHP Foundation disclosed the two flaws on the evening of 21...
What it says, as the collector read it
PHP2Shell security flaw forces thousands of Nepali websites offline
Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page my/news/kathmandupost/science-technology-2026-10-25-php2shell-security-flaw-forces, snapshot 20261025T093507Z. Copied byte for byte; every file's sha256 is in captures/20261025T093507Z/provenance.json and was re-checked against the watch's own hashes.
What the page says
_Curator's reading of the capture._
The Kathmandu Post, 25 October: PHP2Shell forced thousands of Nepali websites offline. The PHP Foundation disclosed the two flaws on the evening of 21 October; a Nepali official explains that distributing and activating an update across servers, cloud systems and user environments can take from a few hours to a week, which slowed the restoration of sites taken offline as a precaution; a centre patched its website on the night of 21 October and brought it back, other systems such as non-PHP mail servers were restored the next day and the rest were being audited; installing the patch alone is not enough on older systems, and some legacy source code had not been audited.
> On the evening of October 21, the PHP Foundation disclosed two security vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619.
Why it is here
From the promotion queue (index/promote.json, priority 4): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell security flaw forces thousands of Nepali websites offline". Selected mechanically, not read by a person.
Capture notes
Language en. Nothing in the page addresses an AI or hides text from a reader.
Claims that cite it
No claim cites this source yet.
Events that cite it
No timeline event cites this source yet.
The bytes
capture 20261025T093507Z · HTTP 200 · https://kathmandupost.com/science-technology/2026/10/25/php2shell-security-flaw-forces-thousands-of-nepali-websites-offline
headers.json7506560d25e320827ba16b5cb46e7a32de2f0f41f0f052334d4cb9cea459599d 1,191 bytespage.htmld9b63ae1d3d45f780d5599d10ce1beef57c3d4ee2e1892de3dd13ae31d1a8614 72,783 bytesprovenance.json2e7a756110d5e11b8e5843ecc284ae16dffd50495643b9d41164a693ba90e419 1,841 bytesrendered.html1819d744256c53be3890eca8589b436bfa9cba48dd3d17d62882ff0283495b98 248,007 bytesscreenshot.jpg5dcd532e293ed5b16bdd764c43f6dba745e32891a2b53fce0db79079f643ef44 684,896 bytestext.txtb8a541ead3bd8295625877c330bbc21a09e8eb6f77fd70c94881d1c06b38e32e 12,495 bytes
The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →