Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?

Wikipedia, as a graph / PHP2Shell / Every reference

Every reference in Wikipedia's PHP2Shell article

43 references at revision 1381798757: 16 are pages this site's evidence vault holds, 26 are not yet captured, and 42 resolve to a party this site knows. A reference this site has captured is evidence this site can cite as its own, with the capture's hash; a reference it has not is a request to the collectors (board). The publisher is read from the page's address first, so the Y Combinator forum is not The Hacker News.

#	Reference	Publisher	Here	Cited by	Our claims on it
1	PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet 21 October 2026	Wiz Research	captured	the infobox	wordpress-drupal, scale-70pc-internet, scale-70pc-websites, ai-found, wiz-independent, most-severe
2	CVE-2026-109618	The CVE Program	captured	#68f5	two-cves-9.2, cisa-none, ac-high
3	CVE-2026-109619	The CVE Program	captured	#68f5	two-cves-9.2
4	PHP: News Archive - 20 Oct 2026 20 October 2026	The PHP Group / php.net	captured	#0cdc	two-cves-9.2, rce-modphp, only-update, disclosure-22oct, release-time, preannounce-time
5	PHP: News Archive – 21 Oct 2026 21 October 2026	The PHP Group / php.net	captured	#53a6, #6c88, #d5ee, #48b5, #2ef6	two-cves-9.2, rce-modphp, only-update, disclosure-22oct, release-time, preannounce-time
6	A Hacking Tool Built With A.I. Can Breach Phones Without a Click 8 September 2026	The New York Times	not captured	#0c37	none
7	PHP: Releases	The PHP Group / php.net	not captured	#76b5	none
8	Exclusive AI Just Found a Bug That Puts up to 70% of the World's Websites at Risk 21 October 2026	The Wall Street Journal	not captured	#0c37, #dbce, #76b5, #c944	none
9	PHP knew about one of the flaws in 2024 but could not agree a fix 21 October 2026	The Next Web	not captured	#372a, #c944, #c56c	none
10	Today's PHP Security Release, and How We're Strengthening PHP Security	The PHP Foundation	captured	#372a	leak-cve-ids, leak-video
11	php.announce: [ANNOUNCE] Upcoming Critical PHP Security Release	The PHP Group / php.net	not captured	#cf77	none
12	PHP warns admins of two critical flaws, emergency patches coming tomorrow	BleepingComputer	not captured	#cf77, #c56c	none
13	RCE via OOM corruption 21 October 2026	GitHub	captured	#7844	two-cves-9.2, rce-modphp, rce-fpm, fix-bailout, openai-same-day, four-reporters, release-time, fix-engine
14	RCE via stale global state 21 October 2026	GitHub	captured	#7844	two-cves-9.2, rce-fpm, only-update, four-reporters, fix-engine
15	Blog: PHP2Shell: a Timeline 22 October 2026	scherzer.dev	not captured	#7844	none
16	Critical PHP Security Release - CVE-2026-109618 and CVE-2026-109619 22 October 2026	cPanel	not captured	#7844	none
17	PHP CVE-2026-109618 and CVE-2026-109619: CloudLinux Package Status and Imunify360 Protection 21 October 2026	CloudLinux	not captured	#7844	none
18	Tell HN: 2x PHP RCE CVEs with CVSS 10.0 Incoming	Hacker News (news.ycombinator.com)	not captured	#c944	none
19	PHP warns it plans to release 2 emergency patches imminently 20 October 2026	Ars Technica	captured	#eb6b	none
20	Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot AWS Security Blog 21 October 2026	Amazon (CJ Moses)	captured	#b8cd	amazon-honeypot, probing, no-confirmed-compromise
21	PHP ships emergency patches for critical PHP2Shell flaws 21 October 2026	BleepingComputer	captured	#2f40	none
22	Hold on to your butts: Web admins braced for emergency PHP updates to plug leaked exploits 21 October 2026	PC Gamer	not captured	#2f40	none
23	PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free. [...] 21 October 2026	X (Twitter)	not captured	#2f40	none
24	PHP RCE FAQ: PHP2Shell CVE-2026-109618 & CVE-2026-109619 20 October 2026	watchTowr	captured	#fb16	watchtowr-itw
25	Websites taken down worldwide as critical PHP cyber-security update issued 21 October 2026	BBC News	not captured	#4cd4, #5505	none
26	Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619) 21 October 2026	Huntress	captured	#4cd4	huntress-none, no-confirmed-compromise, pocs-wrong
27	Government websites go dark after AI-discovered flaw sparks security scramble 21 October 2026	Reuters	not captured	#16c7, #5505	none
28	Major websites go offline as critical PHP vulnerability triggers security fears 21 October 2026	The Brussels Times	not captured	#5505	none
29	Critical security issue affecting PHP 21 October 2026	UK NCSC	captured	#5505	offline-ncsc
30	Canadian apps and government websites go offline to ward off online danger 22 October 2026	CP24	not captured	#e4c5	none
31	This Flaw Is So Serious Websites Should Consider Going Offline, NSA Says 21 October 2026	PCMag	not captured	#76b5, #2c7a, #4324	none
32	NSA Advisory: PHP Updates 21 October 2026	NSA Cybersecurity	not captured	#2c7a	none
33	Flaw in PHP computer language leads to shutdown of websites around world 21 October 2026	The Guardian	not captured	#a19a	none
34	Singapore organisations urged to patch critical PHP flaws immediately amid cyberattack threat 22 October 2026	CNA (Channel NewsAsia)	captured	#7a36	none
35	Critical Vulnerabilities in PHP (PHP2Shell) 21 October 2026	Cyber Security Agency of Singapore	not captured	#7a36	none
36	PHP vulnerability: Which websites and services are affected? 21 October 2026	Mashable	not captured	#4324, #5b2a	none
37	https://www.itmedia.co.jp/news/article/2610/21/2000002472/ 21 October 2026	ITmedia	not captured	#f76f, #5b2a	none
38	AI just discovered a bug putting 70pc of world's websites at risk 21 October 2026	Australian Financial Review	not captured	#d02e	none
39	Global websites shut down after AI found a critical flaw affecting 70% of the internet CNN Business 21 October 2026	CNN	captured	#490f	none
40	What is PHP, and how bad is the computer language flaw causing website shutdowns globally? 22 October 2026	The Guardian	not captured	#1f46	none
41	What Is PHP? Why Are Government and Business Websites Going Offline? 22 October 2026	The New York Times	not captured	#a730	none
42	'If Anything Happens to This Guy ... Everyone Is Screwed' 22 October 2026	The Atlantic	not captured	#eaa8, #f0c7	none
43	(no URL)	?	no URL	#fb16, #4324	none