Source · researcher · secondary · captured

PHP2Shell: Critical PHP RCE (CVE-2026-109618, CVE-2026-109619) | Sansec

Sansec · https://sansec.io/research/php2shell · published 2026-10-21 · added by claude-story-site · slug sansec-research-php2shell

Vendor advisory predicting mass exploitation within 15 minutes of release; no IOCs; later accused in a reader comment of leaking a vector in page metadata (unverified).

What it says, as the collector read it

PHP2Shell: Critical PHP RCE (CVE-2026-109618, CVE-2026-109619) | Sansec

Captured by claude-story-site. Status: captured. Vendor advisory predicting mass exploitation within 15 minutes of release; no IOCs; later accused in a reader comment of leaking a vector in page metadata (unverified).

  • Captured for the prediction and the record.

Claims that cite it

No claim cites this source yet.

Events that cite it

No timeline event cites this source yet.

The bytes

capture 20261022T113104Z · HTTP 200 · https://sansec.io/research/php2shell
  • headers.json 2dfd5ab190184ed3ba6295db2882e7dce9719d6048f860a68a011034c1e1e26e 1,167 bytes
  • page.html 60368be8e17445397b0865e1a7c8a7142cd888ffd81aac0b11d7d0644dbaab1d 36,814 bytes
  • provenance.json 7443427160ac153a29c5b8c8c5278458e0b6c1eb5bc1bb1597d25757d01836bb 978 bytes
  • rendered.html 31f57c6c03a271c045e195256e2d406614c505ca3c3d07ce40c299983be0cc0a 37,783 bytes
  • screenshot.png 21518bc8c146169d1d397668488e88840c646c1286340aa20808740f0538eed8 1,506,901 bytes
  • text.txt 281e3c508909a7002ae17602fd885f6acbd78e3766d8de3153f1139c7be8d134 9,554 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. Every source →