Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Source · news · secondary · captured
PHP2Shell: le falle critiche di PHP colpiscono soprattutto i server mod_php - NotebookCheck.it News
Promoted from the source watch (pack copy 7r83qic5), snapshot 20261023T160435Z, queue priority 3 (mechanical selection by researcher@php.newsroom, read by the curator). Notebookcheck.it (Italian): the critical PHP flaws hit mod_php servers most. PHP brought the security release forward to Wednesday 21 October at 14:00...
What it says, as the collector read it
PHP2Shell: le falle critiche di PHP colpiscono soprattutto i server mod_php - NotebookCheck.it News
Promoted by curator@php.newsroom from the source watch (vault oq9gflln, read from its pack copy 7r83qic5), page it/news/notebookcheck/php2shell-le-falle-critiche-di-php-colpiscono-soprattutto-i, snapshot 20261023T160435Z. Copied byte for byte; every file's sha256 is in captures/20261023T160435Z/provenance.json and was re-checked against the watch's own hashes.
What the page says
_Curator's reading of the capture._
Notebookcheck.it (Italian): the critical PHP flaws hit mod_php servers most. PHP brought the security release forward to Wednesday 21 October at 14:00 UTC after details of the two vulnerabilities leaked on Hacker News the day before; fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35; both bugs are in the interpreter itself, not in a CMS. It quotes the PHP advisory title for CVE-2026-109618: RCE through corruption caused by OOM.
> PHP ha anticipato il rilascio di sicurezza a mercoledì 21 ottobre, alle 14:00 UTC, dopo che i dettagli di due vulnerabilità erano trapelati su Hacker News il giorno prima.
_Curator's translation:_ "PHP brought the security release forward to Wednesday 21 October, at 14:00 UTC, after the details of two vulnerabilities had leaked on Hacker News the day before."
_The watch reader's summary (researcher@php.newsroom, of its snapshot 20261022T181608Z, not necessarily this one):_ Notebookcheck (machine-translated from German via DeepL) gives a detailed technical description of both bugs, which SAPIs are exposed, exploitation reports, and mitigations (memory_limit=-1, upload progress off).
Why it is here
From the promotion queue (index/promote.json, priority 3): Mentions CVE-2026-109618/109619 or php2shell: "PHP2Shell: le falle critiche di PHP colpiscono soprattutto i server mod_php - NotebookCheck.it News". Selected mechanically, not read by a person. Text also matches compromise/breach terms: check for a named organisation or cause.
Capture notes
Language it. Nothing in the page addresses an AI or hides text from a reader.
Claims that cite it
No claim cites this source yet.
Events that cite it
No timeline event cites this source yet.
The bytes
capture 20261023T160435Z · HTTP 200 · https://www.notebookcheck.it/PHP2Shell-le-falle-critiche-di-PHP-colpiscono-soprattutto-i-server-mod_php.1430599.0.html
headers.jsonc95e2c73ec72ba8ca67b45f79042c5cb33e3a682fafe627f90bd1a425f2f3e08 963 bytespage.html97b616e2c905233496da1acaf9b44616a2b7c1ee69667948fd38c29016eb4298 117,432 bytesprovenance.jsone40e82b4ebee5918fdfff0a967357c41f5624d0ca95a50d360cdcf075b2b9cdc 1,776 bytesrendered.html71b1a624e2811d2afb57e028419d78d2027bc2567f74d4a73c533abd5b0f70ff 136,833 bytestext.txte511e7a4fd8faed0bd00e00fc3f87c957049cd80ffe909d7caae3ed02a623b2d 9,274 bytes
The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →