Entity · moving across domains

Php2shell

A topic on our watch list — we track its coverage across 4 coverage verticals, including Chinese Overcapacity, Cloud Computing and Cybersecurity.

As of 1 Nov 2026Last evidence 31 Oct 2026

What is happening now

  • Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces

    Reported claim · first reported 29 Oct 2026 · 1 claim · best-carried claim: 2 separate publishers

  • Linux Kernel Fragnesia CVE-2026-46300 in CISA KEV: Local Root Flaw Chained With PHP2Shell

    Reported claim · first reported 29 Oct 2026 · 1 claim · best-carried claim: 3 separate publishers

  • PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network

    Reported claim · first reported 28 Oct 2026 · 1 claim · best-carried claim: 2 separate publishers

  • CISA confirms PHP2Shell under attack as researchers clock successful exploits

    Reported claim · first reported 27 Oct 2026 · 1 claim · best-carried claim: 3 separate publishers

  • CISA Warns of PHP2Shell Vulnerabilities Actively Exploited in Attacks

    Reported claim · first reported 27 Oct 2026 · 1 claim · best-carried claim: 2 separate publishers

All 5 events and claims involving Php2shell

What changed

  • Attention Emerging: 12 mentions on 1 Nov 2026, the first day on record; no earlier day to compare.
  • State No change in coverage state or wire tier recorded since 1 Nov 2026.
  • Claims No claim first reported since 31 Oct 2026.

How well we know this

139 documents · 50 publishers · 16% contain a typed assertion · last evidence 31 Oct 2026

  • Gap: assertion coverage 0.158: about 84% of mentions carry no typed assertion
  • Gap: 3 receipts withheld: no source link (the same rule the topic record applies)

In this snapshot’s daily coverage:

Reported alongside Php2shell

Names most often reported alongside it; bigger circles and heavier lines mean more shared documents. A dashed circle has no page of its own yet.

AIOpenAIGoogleCvssWordpress
  • AI · 79 shared documents
  • Cve-2026-109618 · 58 shared documents · no page of its own yet
  • Cve-2026-109619 · 57 shared documents · no page of its own yet
  • OpenAI · 54 shared documents
  • Google · 47 shared documents
  • Linux · 35 shared documents · no page of its own yet
  • CISA · 35 shared documents · no page of its own yet
  • Cvss · 34 shared documents
  • GitHub · 33 shared documents · no page of its own yet
  • Wordpress · 33 shared documents

Story momentum

Emerging

12 mentions on 1 Nov 2026, the first day on record; no earlier day to compare.

How often tracked coverage mentions Php2shell, day by day.

Market price, cited

Not priced yet

No open prediction market prices a question materially about Php2shell yet. Ask about Php2shell

No market price on file: no prediction market prices a question about this name yet

Coverage volume and market price are separate measures.

For developers

This page is also an object: GET https://sigb.ai/api/v1/node/e/6b58f8229d9475da2af04167 returns the same record as sb.node.v1. Or call the get_entity MCP tool at https://sigb.ai/api/mcp with name php2shell.

{
  "name": "php2shell",
  "label": "Php2shell",
  "asOf": "2026-11-01",
  "mentions": 12,
  "domains": 4,
  "node": {
    "id": "sb:e/6b58f8229d9475da2af04167",
    "schema": "sb.node.v1",
    "rest": "https://sigb.ai/api/v1/node/e/6b58f8229d9475da2af04167",
    "knowledgeCutoff": "2026-11-01T21:47:04.267910+00:00",
    "snapshot": "this deploy's committed data files (commit not exposed in this runtime)"
  },
  "coverageTrend": "new",
  "history": {
    "since": "2026-11-01T17:21:51.464112+00:00",
    "changes": 0
  },
  "whereFrom": {
    "level": "counts",
    "label": "12 mentions across 4 domains",
    "children": [
      {
        "level": "reports",
        "label": "5 reports drawn on this page, each with its link",
        "children": {
          "count": 5,
          "unfold": "expand=+1"
        }
      },
      {
        "level": "domains",
        "label": "4 coverage domains",
        "children": {
          "count": 4,
          "unfold": "expand=+1"
        }
      },
      {
        "level": "not shown",
        "label": "The other 7 mentions",
        "edge": "counted daily from tracked coverage; single mentions are not listed one by one"
      }
    ]
  }
}

The figures on this page, as data. The tool returns the full entity record.

Events involving Php2shell

Most-reported first, then newest. Registered events come from the event record; reported events are groups of claims about one occurrence. Claims are grouped when they were first reported within 2 days of each other and either name at least 2 of the same people, places or things besides this one, or share at least 25% of their wording. Each claim keeps its own record.

  • Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces

    Reported claim · first reported 29 Oct 2026 · 1 claim · best-carried claim: 2 separate publishers

    single source

  • Linux Kernel Fragnesia CVE-2026-46300 in CISA KEV: Local Root Flaw Chained With PHP2Shell

    Reported claim · first reported 29 Oct 2026 · 1 claim · best-carried claim: 3 separate publishers

    single source

  • PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network

    Reported claim · first reported 28 Oct 2026 · 1 claim · best-carried claim: 2 separate publishers

    single source

  • CISA confirms PHP2Shell under attack as researchers clock successful exploits

    Reported claim · first reported 27 Oct 2026 · 1 claim · best-carried claim: 3 separate publishers

    single source

  • CISA Warns of PHP2Shell Vulnerabilities Actively Exploited in Attacks

    Reported claim · first reported 27 Oct 2026 · 1 claim · best-carried claim: 2 separate publishers

    single source

Walk the record from Php2shell

Open where it comes from, follow a claim or a related name, and use the trail to come back. Every step says what it is, how it stands and when. Machines read the same record.

Php2shell

Entity.

Evidence
139 documents · 50 separate publishers · a mention shows the name is in use, not that any claim about it is true
Standing
A name from our starting list; its record is kept up to date automatically from coverage
Time
first seen 21 Oct 2026, last seen 31 Oct 2026
Measured
16% of mentions say something specific about it; the rest only name it
As of
1 Nov 2026
15 links from here

Who it moves with: the 10 names are in the map above.

What is claimed about it (5)

  • Single source: Reported by one source so far.

Situations it is named in (0)

none on file at this cutoff

For machines: this record as JSON

Watch this

What the coverage says

Recent reporting that names Php2shell, newest first. Open any row to follow it to the original article.

1 more headline counted but not shown: no source link on file

Evidence tiers: primary source = an official public record · attributed = a named outlet, receipt linked · lead = observed, not yet receipted.

What it connects to

Related records.

Pull a thread

Recorded history

No change in coverage state or wire tier recorded since 1 Nov 2026.

Ask about Php2shellWatch Php2shell

Story momentum counts mentions in tracked coverage. Prices are the market’s own, cited with the venue. Informational only, not advice. As of 1 Nov 2026.