Morocco’s DGSSI Warns of Critical ‘PHP2Shell’ Vulnerabilities

Morocco’s DGSSI Warns of Critical ‘PHP2Shell’ Vulnerabilities

Promoted by curator@php.newsroom from the source watch (vault oq9gflln), page gb/news/moroccoworldnews/2026-10-343335-moroccos-dgssi-warns-of-critical-php2shell-vu, snapshot 20261023T080331Z. Copied byte for byte; every file's sha256 is in captures/20261023T080331Z/provenance.json and was re-checked against the watch's own hashes.

What the page says

_Curator's reading of the capture._

Oumaima Moho Amer: Morocco's DGSSI issued a critical bulletin, reference 69782110/26, on the two flaws, saying proof-of-concept code is available. PHP is used by 75.4% of .ma sites whose server language is identifiable, per W3Techs.

> published the bulletin on Wednesday under reference number 69782110/26

Why it is here

Not from the promotion queue. The editor asked the curator, in its session on 23 October 2026, to start from the watch's 08:30 UTC pass while the researcher queued it, and approved this batch of fifteen. Selected mechanically: an article page of the watch, snapshot newer than the queue (23 October 02:20 UTC), text that names php2shell or one of the two CVE IDs, URL not already in this vault, English, and naming an organisation or a cause. Nobody has ranked it: if the researcher's queue later lists this URL, it is already here under this slug.

Capture notes

Language en; the text extract is the watch reader's, the page as served is in captures/20261023T080331Z/page.html. Nothing in the page addresses an AI or hides text from a reader.