# Every reference in Wikipedia's PHP2Shell article

> Research: collected from outside sources and what this site derives from them; every fact links to a saved copy of its source.

All 43 references of the article: which this site has captured, who publishes each, which statements cite it and which of this site's claims rest on the same page.

[Wikipedia, as a graph](../../index.html) / [PHP2Shell](../index.html) / Every reference

# Every reference in Wikipedia's PHP2Shell article

43 references at revision `1381798757`: 16 are pages this site's evidence vault holds, 26 are not yet captured, and 42 resolve to a party this site knows. A reference this site has captured is evidence this site can cite as its own, with the capture's hash; a reference it has not is a request to the collectors (board). The publisher is read from the page's address first, so the Y Combinator forum is not The Hacker News.

| # | Reference | Publisher | Here | Cited by | Our claims on it |
|---|---|---|---|---|---|
| 1 | [PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet](https://www.wiz.io/blog/php2shell-php-rce) 21 October 2026 | [Wiz Research](../../../actors/wiz/index.html) | [captured](../../../sources/wiz-blog-php2shell/index.html) | the infobox | [wordpress-drupal](../../../facts/wordpress-drupal/index.html), [scale-70pc-internet](../../../facts/scale-70pc-internet/index.html), [scale-70pc-websites](../../../facts/scale-70pc-websites/index.html), [ai-found](../../../facts/ai-found/index.html), [wiz-independent](../../../facts/wiz-independent/index.html), [most-severe](../../../facts/most-severe/index.html) |
| 2 | [CVE-2026-109618](https://www.cve.org/CVERecord?id=CVE-2026-109618) | [The CVE Program](../../../graph/parties/index.html#p-cve-program) | [captured](../../../sources/cve-cve-2026-109618/index.html) | [#68f5](../statements/index.html#68f5ead478) | [two-cves-9.2](../../../facts/two-cves-9.2/index.html), [cisa-none](../../../facts/cisa-none/index.html), [ac-high](../../../facts/ac-high/index.html) |
| 3 | [CVE-2026-109619](https://www.cve.org/CVERecord?id=CVE-2026-109619) | [The CVE Program](../../../graph/parties/index.html#p-cve-program) | [captured](../../../sources/cve-cve-2026-109619/index.html) | [#68f5](../statements/index.html#68f5ead478) | [two-cves-9.2](../../../facts/two-cves-9.2/index.html) |
| 4 | [PHP: News Archive - 20 Oct 2026](https://www.php.net/archive/2026.php#2026-10-20-1) 20 October 2026 | [The PHP Group / php.net](../../../actors/php-group/index.html) | [captured](../../../sources/php-net-advisory/index.html) | [#0cdc](../statements/index.html#0cdc0152f8) | [two-cves-9.2](../../../facts/two-cves-9.2/index.html), [rce-modphp](../../../facts/rce-modphp/index.html), [only-update](../../../facts/only-update/index.html), [disclosure-22oct](../../../facts/disclosure-22oct/index.html), [release-time](../../../facts/release-time/index.html), [preannounce-time](../../../facts/preannounce-time/index.html) |
| 5 | [PHP: News Archive – 21 Oct 2026](https://www.php.net/archive/2026.php#2026-10-21-5) 21 October 2026 | [The PHP Group / php.net](../../../actors/php-group/index.html) | [captured](../../../sources/php-net-advisory/index.html) | [#53a6](../statements/index.html#53a69eb089), [#6c88](../statements/index.html#6c888a6634), [#d5ee](../statements/index.html#d5eee86f0d), [#48b5](../statements/index.html#48b578a6c0), [#2ef6](../statements/index.html#2ef66988b2) | [two-cves-9.2](../../../facts/two-cves-9.2/index.html), [rce-modphp](../../../facts/rce-modphp/index.html), [only-update](../../../facts/only-update/index.html), [disclosure-22oct](../../../facts/disclosure-22oct/index.html), [release-time](../../../facts/release-time/index.html), [preannounce-time](../../../facts/preannounce-time/index.html) |
| 6 | [A Hacking Tool Built With A.I. Can Breach Phones Without a Click](https://www.nytimes.com/2026/09/08/us/politics/calif-ai-worm-wechat-hack.html) 8 September 2026 | [The New York Times](../../../graph/parties/index.html#p-nyt) | not captured | [#0c37](../statements/index.html#0c37f722e9) | none |
| 7 | [PHP: Releases](https://www.php.net/releases/index.php) | [The PHP Group / php.net](../../../actors/php-group/index.html) | not captured | [#76b5](../statements/index.html#76b5643253) | none |
| 8 | [Exclusive AI Just Found a Bug That Puts up to 70% of the World's Websites at Risk](https://www.wsj.com/tech/cybersecurity/ai-just-found-a-bug-that-puts-up-to-70-of-the-worlds-websites-at-risk-fd0902ea) 21 October 2026 | [The Wall Street Journal](../../../graph/parties/index.html#p-wsj) | not captured | [#0c37](../statements/index.html#0c37f722e9), [#dbce](../statements/index.html#dbceab31be), [#76b5](../statements/index.html#76b5643253), [#c944](../statements/index.html#c9448b9736) | none |
| 9 | [PHP knew about one of the flaws in 2024 but could not agree a fix](https://thenextweb.com/news/php-foundation-structural-failure-2024-flaw-leak) 21 October 2026 | [The Next Web](../../../graph/parties/index.html#p-thenextweb) | not captured | [#372a](../statements/index.html#372a6c6d4d), [#c944](../statements/index.html#c9448b9736), [#c56c](../statements/index.html#c56cee404e) | none |
| 10 | [Today's PHP Security Release, and How We're Strengthening PHP Security](https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/) | [The PHP Foundation](../../../actors/php-foundation/index.html) | [captured](../../../sources/phpfoundation-blog-security-release-leak/index.html) | [#372a](../statements/index.html#372a6c6d4d) | [leak-cve-ids](../../../facts/leak-cve-ids/index.html), [leak-video](../../../facts/leak-video/index.html) |
| 11 | [php.announce: [ANNOUNCE] Upcoming Critical PHP Security Release](https://news-web.php.net/php.announce/509) | [The PHP Group / php.net](../../../actors/php-group/index.html) | not captured | [#cf77](../statements/index.html#cf776b2323) | none |
| 12 | [PHP warns admins of two critical flaws, emergency patches coming tomorrow](https://www.bleepingcomputer.com/news/security/php-warns-admins-of-two-critical-flaws-emergency-patches-coming-tomorrow/) | [BleepingComputer](../../../graph/parties/index.html#p-bleepingcomputer) | not captured | [#cf77](../statements/index.html#cf776b2323), [#c56c](../statements/index.html#c56cee404e) | none |
| 13 | [RCE via OOM corruption](https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w) 21 October 2026 | [GitHub](../../../graph/parties/index.html#p-github) | [captured](../../../sources/github-ghsa-w8hw-w9fx-j79w/index.html) | [#7844](../statements/index.html#78444f5354) | [two-cves-9.2](../../../facts/two-cves-9.2/index.html), [rce-modphp](../../../facts/rce-modphp/index.html), [rce-fpm](../../../facts/rce-fpm/index.html), [fix-bailout](../../../facts/fix-bailout/index.html), [openai-same-day](../../../facts/openai-same-day/index.html), [four-reporters](../../../facts/four-reporters/index.html), [release-time](../../../facts/release-time/index.html), [fix-engine](../../../facts/fix-engine/index.html) |
| 14 | [RCE via stale global state](https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp) 21 October 2026 | [GitHub](../../../graph/parties/index.html#p-github) | [captured](../../../sources/github-ghsa-6wmf-4rv5-p3rp/index.html) | [#7844](../statements/index.html#78444f5354) | [two-cves-9.2](../../../facts/two-cves-9.2/index.html), [rce-fpm](../../../facts/rce-fpm/index.html), [only-update](../../../facts/only-update/index.html), [four-reporters](../../../facts/four-reporters/index.html), [fix-engine](../../../facts/fix-engine/index.html) |
| 15 | [Blog: PHP2Shell: a Timeline](https://scherzer.dev/Blog/20261022-php2shell-timeline) 22 October 2026 | [scherzer.dev](../../../graph/parties/index.html#p-scherzer) | not captured | [#7844](../statements/index.html#78444f5354) | none |
| 16 | [Critical PHP Security Release - CVE-2026-109618 and CVE-2026-109619](https://support.cpanel.net/hc/en-us/articles/44397389677335-Critical-PHP-Security-Release-CVE-2026-109618-and-CVE-2026-109619) 22 October 2026 | [cPanel](../../../graph/parties/index.html#p-cpanel) | not captured | [#7844](../statements/index.html#78444f5354) | none |
| 17 | [PHP CVE-2026-109618 and CVE-2026-109619: CloudLinux Package Status and Imunify360 Protection](https://blog.cloudlinux.com/php-cve-2026-109618-and-cve-2026-109619/) 21 October 2026 | [CloudLinux](../../../graph/parties/index.html#p-cloudlinux) | not captured | [#7844](../statements/index.html#78444f5354) | none |
| 18 | [Tell HN: 2x PHP RCE CVEs with CVSS 10.0 Incoming](https://news.ycombinator.com/item?id=50167754) | [Hacker News (news.ycombinator.com)](../../../graph/parties/index.html#p-ycombinator-hn) | not captured | [#c944](../statements/index.html#c9448b9736) | none |
| 19 | [PHP warns it plans to release 2 emergency patches imminently](https://arstechnica.com/security/2026/10/php-maintainers-tell-web-devs-to-prepare-themselves-for-critical-security-patches/) 20 October 2026 | [Ars Technica](../../../graph/parties/index.html#p-ars-technica) | [captured](../../../sources/arstechnica-security-2026-10-php-maintainers-tell-web-devs-to-prepare-th/index.html) | [#eb6b](../statements/index.html#eb6b69df3d) | none |
| 20 | [Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot AWS Security Blog](https://aws.amazon.com/blogs/security/amazon-threat-intelligence-identifies-php2shell-exploitation-prior-to-public-disclosure-in-madpot/) 21 October 2026 | [Amazon (CJ Moses)](../../../actors/amazon/index.html) | [captured](../../../sources/aws-security-blog-madpot/index.html) | [#b8cd](../statements/index.html#b8cd7ec580) | [amazon-honeypot](../../../facts/amazon-honeypot/index.html), [probing](../../../facts/probing/index.html), [no-confirmed-compromise](../../../facts/no-confirmed-compromise/index.html) |
| 21 | [PHP ships emergency patches for critical PHP2Shell flaws](https://www.bleepingcomputer.com/news/security/php-ships-emergency-patches-for-critical-php2shell-flaws/) 21 October 2026 | [BleepingComputer](../../../graph/parties/index.html#p-bleepingcomputer) | [captured](../../../sources/bleepingcomputer-php2shell/index.html) | [#2f40](../statements/index.html#2f40ea4686) | none |
| 22 | [Hold on to your butts: Web admins braced for emergency PHP updates to plug leaked exploits](https://www.pcgamer.com/software/security/we-expect-mass-attacks-to-start-within-15-minutes-of-the-release-web-admins-braced-for-emergency-php-updates-to-plug-leaked-high-severity-holes/) 21 October 2026 | [PC Gamer](../../../graph/parties/index.html#p-pc-gamer) | not captured | [#2f40](../statements/index.html#2f40ea4686) | none |
| 23 | [PHP sites behind Cloudflare already have an initial set of WAF rules deployed for the known exploit vectors in these vulnerabilities. The rules are available to all customers, including free. [...]](https://x.com/dok2001/status/2112811965735202970) 21 October 2026 | [X (Twitter)](../../../graph/parties/index.html#p-x) | not captured | [#2f40](../statements/index.html#2f40ea4686) | none |
| 24 | [PHP RCE FAQ: PHP2Shell CVE-2026-109618 & CVE-2026-109619](https://watchtowr.com/intelligence/php-cve-2026-109618-faq/) 20 October 2026 | [watchTowr](../../../actors/watchtowr/index.html) | [captured](../../../sources/watchtowr-php2shell-faq/index.html) | [#fb16](../statements/index.html#fb16c2a8cd) | [watchtowr-itw](../../../facts/watchtowr-itw/index.html) |
| 25 | [Websites taken down worldwide as critical PHP cyber-security update issued](https://www.bbc.com/news/articles/cmly0lg3w5x2o) 21 October 2026 | [BBC News](../../../actors/bbc/index.html) | not captured | [#4cd4](../statements/index.html#4cd4f33a65), [#5505](../statements/index.html#5505d316af) | none |
| 26 | [Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)](https://www.huntress.com/blog/php2shell-leaked-critical-php-vulnerabilities) 21 October 2026 | [Huntress](../../../actors/huntress/index.html) | [captured](../../../sources/huntress-php2shell-rapid-response/index.html) | [#4cd4](../statements/index.html#4cd4f33a65) | [huntress-none](../../../facts/huntress-none/index.html), [no-confirmed-compromise](../../../facts/no-confirmed-compromise/index.html), [pocs-wrong](../../../facts/pocs-wrong/index.html) |
| 27 | [Government websites go dark after AI-discovered flaw sparks security scramble](https://www.reuters.com/world/asia-pacific/eu-agency-warns-websites-may-need-be-taken-offline-php-prepares-patches-2026-10-21/) 21 October 2026 | [Reuters](../../../graph/parties/index.html#p-reuters) | not captured | [#16c7](../statements/index.html#16c7e1f9b1), [#5505](../statements/index.html#5505d316af) | none |
| 28 | [Major websites go offline as critical PHP vulnerability triggers security fears](https://www.brusselstimes.com/belgium/2371464/major-websites-go-offline-as-critical-php-vulnerability-triggers-security-fears) 21 October 2026 | [The Brussels Times](../../../graph/parties/index.html#p-brussels-times) | not captured | [#5505](../statements/index.html#5505d316af) | none |
| 29 | [Critical security issue affecting PHP](https://www.ncsc.gov.uk/news/critical-security-issue-affecting-php) 21 October 2026 | [UK NCSC](../../../graph/parties/index.html#p-ncsc-uk) | [captured](../../../sources/ncsc-news-php/index.html) | [#5505](../statements/index.html#5505d316af) | [offline-ncsc](../../../facts/offline-ncsc/index.html) |
| 30 | [Canadian apps and government websites go offline to ward off online danger](https://www.cp24.com/news/canada/2026/10/21/canadian-apps-and-government-websites-go-offline-to-ward-off-online-danger/) 22 October 2026 | [CP24](../../../graph/parties/index.html#p-cp24) | not captured | [#e4c5](../statements/index.html#e4c5b04daa) | none |
| 31 | [This Flaw Is So Serious Websites Should Consider Going Offline, NSA Says](https://www.pcmag.com/news/php-flaw-is-so-serious-websites-should-consider-going-offline-nsa-says) 21 October 2026 | [PCMag](../../../graph/parties/index.html#p-pcmag) | not captured | [#76b5](../statements/index.html#76b5643253), [#2c7a](../statements/index.html#2c7a14586e), [#4324](../statements/index.html#4324f7631b) | none |
| 32 | [NSA Advisory: PHP Updates](https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/4630238/nsa-advisory-php-updates/) 21 October 2026 | [NSA Cybersecurity](../../../graph/parties/index.html#p-nsa) | not captured | [#2c7a](../statements/index.html#2c7a14586e) | none |
| 33 | [Flaw in PHP computer language leads to shutdown of websites around world](https://www.theguardian.com/technology/2026/oct/21/flaw-in-php-computer-language-leads-to-shutdown-of-websites-around-world) 21 October 2026 | [The Guardian](../../../graph/parties/index.html#p-guardian) | not captured | [#a19a](../statements/index.html#a19a5dd331) | none |
| 34 | [Singapore organisations urged to patch critical PHP flaws immediately amid cyberattack threat](https://www.channelnewsasia.com/singapore/php-vulnerabilities-csa-singapore-firms-cybersecurity-6482006) 22 October 2026 | [CNA (Channel NewsAsia)](../../../graph/parties/index.html#p-cna-sg) | [captured](../../../sources/channelnewsasia-singapore-php-vulnerabilities-csa-singapore-firms-cybersecur/index.html) | [#7a36](../statements/index.html#7a3641004e) | none |
| 35 | [Critical Vulnerabilities in PHP (PHP2Shell)](https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-151/) 21 October 2026 | [Cyber Security Agency of Singapore](../../../graph/parties/index.html#p-csa-sg) | not captured | [#7a36](../statements/index.html#7a3641004e) | none |
| 36 | [PHP vulnerability: Which websites and services are affected?](https://mashable.com/tech/php-vulnerability-websites-offline-affected-services) 21 October 2026 | [Mashable](../../../graph/parties/index.html#p-mashable) | not captured | [#4324](../statements/index.html#4324f7631b), [#5b2a](../statements/index.html#5b2a5b2f27) | none |
| 37 | [https://www.itmedia.co.jp/news/article/2610/21/2000002472/](https://www.itmedia.co.jp/news/article/2610/21/2000002472/) 21 October 2026 | [ITmedia](../../../graph/parties/index.html#p-itmedia) | not captured | [#f76f](../statements/index.html#f76f3e6f58), [#5b2a](../statements/index.html#5b2a5b2f27) | none |
| 38 | [AI just discovered a bug putting 70pc of world's websites at risk](https://www.afr.com/world/north-america/websites-go-dark-as-ai-discovered-bug-sparks-global-security-scramble-20261022-p617nf) 21 October 2026 | [Australian Financial Review](../../../graph/parties/index.html#p-afr) | not captured | [#d02e](../statements/index.html#d02e88d560) | none |
| 39 | [Global websites shut down after AI found a critical flaw affecting 70% of the internet CNN Business](https://edition.cnn.com/2026/10/21/tech/php2shell-vulnerability-ai) 21 October 2026 | [CNN](../../../graph/parties/index.html#p-cnn) | [captured](../../../sources/cnn-php2shell-ai/index.html) | [#490f](../statements/index.html#490feb9e37) | none |
| 40 | [What is PHP, and how bad is the computer language flaw causing website shutdowns globally?](https://www.theguardian.com/technology/2026/oct/22/what-is-php-computer-language-flaw-causing-global-website-shutdowns) 22 October 2026 | [The Guardian](../../../graph/parties/index.html#p-guardian) | not captured | [#1f46](../statements/index.html#1f46a5634c) | none |
| 41 | [What Is PHP? Why Are Government and Business Websites Going Offline?](https://www.nytimes.com/2026/10/22/technology/what-is-php-vulnerability-risks.html) 22 October 2026 | [The New York Times](../../../graph/parties/index.html#p-nyt) | not captured | [#a730](../statements/index.html#a730144756) | none |
| 42 | ['If Anything Happens to This Guy ... Everyone Is Screwed'](https://www.theatlantic.com/technology/2026/10/man-who-saved-internet-php-vulnerability/689123/?gift=nwn-guseqS6cY1kVeEKZAV4eM30ZQanhnWOnf22yy-c) 22 October 2026 | [The Atlantic](../../../graph/parties/index.html#p-the-atlantic) | not captured | [#eaa8](../statements/index.html#eaa89f37a9), [#f0c7](../statements/index.html#f0c7d98a4c) | none |
| 43 | (no URL) | ? | no URL | [#fb16](../statements/index.html#fb16c2a8cd), [#4324](../statements/index.html#4324f7631b) | none |


---
site v0.18.0 · data as of 2026-10-24T16:05Z · vault commit 8c16a64a7cf6 · https://php.oct.2026.newsroom.sgit.ai/wikipedia/php2shell/references/index.html