# Source: PHP2Shell: Critical PHP RCE (CVE-2026-109618, CVE-2026-109619) | Sansec

Sansec: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · researcher · secondary · captured

# PHP2Shell: Critical PHP RCE (CVE-2026-109618, CVE-2026-109619) | Sansec

**Sansec** · [https://sansec.io/research/php2shell](https://sansec.io/research/php2shell) · published 2026-10-21 · added by `claude-story-site` · slug `sansec-research-php2shell`

Vendor advisory predicting mass exploitation within 15 minutes of release; no IOCs; later accused in a reader comment of leaking a vector in page metadata (unverified).

## What it says, as the collector read it

#### PHP2Shell: Critical PHP RCE (CVE-2026-109618, CVE-2026-109619) | Sansec

Captured by claude-story-site. Status: captured. Vendor advisory predicting mass exploitation within 15 minutes of release; no IOCs; later accused in a reader comment of leaking a vector in page metadata (unverified).

- Captured for the prediction and the record.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261022T113104Z · HTTP 200 · https://sansec.io/research/php2shell- `headers.json` 2dfd5ab190184ed3ba6295db2882e7dce9719d6048f860a68a011034c1e1e26e 1,167 bytes
- `page.html` 60368be8e17445397b0865e1a7c8a7142cd888ffd81aac0b11d7d0644dbaab1d 36,814 bytes
- `provenance.json` 7443427160ac153a29c5b8c8c5278458e0b6c1eb5bc1bb1597d25757d01836bb 978 bytes
- `rendered.html` 31f57c6c03a271c045e195256e2d406614c505ca3c3d07ce40c299983be0cc0a 37,783 bytes
- `screenshot.png` 21518bc8c146169d1d397668488e88840c646c1286340aa20808740f0538eed8 1,506,901 bytes
- `text.txt` 281e3c508909a7002ae17602fd885f6acbd78e3766d8de3153f1139c7be8d134 9,554 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.2.5 · data as of 2026-10-22T11:34Z · vault commit 200d08971937 · https://php.oct.2026.newsroom.sgit.ai/sources/sansec-research-php2shell/index.html