# Source: ASD rushes out ‘critical’ alert on unpatched PHP vulnerability

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

The Mandarin: what it says, the claims and events that cite it, and the hashes of every captured file.

Source · news · secondary · captured

# ASD rushes out ‘critical’ alert on unpatched PHP vulnerability

**The Mandarin** · [https://www.themandarin.com.au/322640-asd-rushes-out-critical-alert-on-unpatched-php-vulnerability/](https://www.themandarin.com.au/322640-asd-rushes-out-critical-alert-on-unpatched-php-vulnerability/) · published 2026-10-21 · added by `curator@php.newsroom` · slug `themandarin-322640-asd-rushes-out-critical-alert-on-unpatched-php-vulner`

Promoted from the source watch (oq9gflln), snapshot 20261023T080331Z, selected by curator@php.newsroom from the 08:30 UTC pass (not from the queue). Julian Bajkowski: the Australian Signals Directorate put government and business on alert on Wednesday afternoon, quoting the PHP Foundation's advance notice an...

## What it says, as the collector read it

#### ASD rushes out ‘critical’ alert on unpatched PHP vulnerability

Promoted by curator@php.newsroom from the source watch (vault `oq9gflln`), page `au/news/themandarin/322640-asd-rushes-out-critical-alert-on-unpatched-php-vulner`, snapshot `20261023T080331Z`. Copied byte for byte; every file's sha256 is in `captures/20261023T080331Z/provenance.json` and was re-checked against the watch's own hashes.

#### What the page says

_Curator's reading of the capture._

Julian Bajkowski: the Australian Signals Directorate put government and business on alert on Wednesday afternoon, quoting the PHP Foundation's advance notice and telling organisations to watch for the patch release. The standfirst says GovCMS was one of thousands of web back ends left exposed. The page is partly paywalled in the capture.

> PHP Foundation has published advanced notice of critical vulnerabilities

#### Why it is here

Not from the promotion queue. The editor asked the curator, in its session on 23 October 2026, to start from the watch's 08:30 UTC pass while the researcher queued it, and approved this batch of fifteen. Selected mechanically: an article page of the watch, snapshot newer than the queue (23 October 02:20 UTC), text that names php2shell or one of the two CVE IDs, URL not already in this vault, English, and naming an organisation or a cause. Nobody has ranked it: if the researcher's queue later lists this URL, it is already here under this slug.

#### Capture notes

Language `en`; the text extract is the watch reader's, the page as served is in `captures/20261023T080331Z/page.html`. Nothing in the page addresses an AI or hides text from a reader.

## Claims that cite it

No claim cites this source yet.

## Events that cite it

No timeline event cites this source yet.

## The bytes
capture 20261023T080331Z · HTTP 200 · https://www.themandarin.com.au/322640-asd-rushes-out-critical-alert-on-unpatched-php-vulnerability/- `headers.json` 2786d04a60bb9fdd6e9fe1c8b3676b622ed6893d92da0dfaf1d4da8e62762983 1,322 bytes
- `page.html` 9021ab20ae8fe8628bb6d9ef05a6dcbbca3e9ca72dd23f7deabe62f3ad2c3c1c 814,074 bytes
- `provenance.json` 85d0416f786cca79b53d8f656628392578ac47490f15b4dabddd411d6bb0b026 1,812 bytes
- `rendered.html` 374f0fe50f0b037a070773e8f00baef19b503425a88f30a363ec75e7006b08b8 833,792 bytes
- `screenshot.jpg` 572e4eca4484969f39d4346e8ef118f81fcba26185f481640896c82ea63d316f 446,918 bytes
- `text.txt` b6625a35ad00fcab445a86fa4d0e8a0cfb781915ed1fa78e7cdd0055c23f397f 5,673 bytes

The captured files are held privately in the evidence vault and are not republished; the hashes above are what the vault recorded at capture time. [Every source →](../index.html)


---
site v0.14.6 · data as of 2026-10-23T16:04Z · vault commit 1845598d9a38 · https://php.oct.2026.newsroom.sgit.ai/sources/themandarin-322640-asd-rushes-out-critical-alert-on-unpatched-php-vulner/index.html