Nicht php.net · Nicht NVD · Nicht CISA

PHP-Sicherheitslücken-Tracker

Inoffizielles Briefing zu Sicherheitslücken in PHP

English简体中文日本語DeutschFrançaisNederlandsEspañol

Sicherheitswarnung

PHP2Shell: PHP aktualisieren. Nur das behebt die Lücke vollständig.

CVE-2026-109618 und CVE-2026-109619 sind kritische Schwachstellen in PHP selbst, die Remote-Code-Ausführung ohne Authentifizierung erlauben. Das PHP-Projekt hat am 21. Oktober 2026 Updates für die unterstützten Zweige 8.2 bis 8.5 veröffentlicht. Starten Sie PHP nach dem Update neu. Eine Firewall ersetzt das Update nicht.

Schritte zur Behebung

Ausfall-Tracker

PHP2Shell-Ausfälle: Websites, die offline gingen, und wann sie zurückkamen

Behördenportale, Hochschulen, Plattformen und bekannte Websites, die am 21.–22. Oktober 2026 laut Berichten im Zusammenhang mit PHP2Shell offline gingen. Ein Eintrag bedeutet keine Kompromittierung: Die meisten gingen vorsorglich oder für Wartung vom Netz.

Zuletzt aktualisiert

53Erfasste Websites
9Noch offline
44Wieder online
4h 47mMedian der Ausfallzeit

Nach Land

  • Niederlande24
  • Global10
  • Japan5
  • Finnland3
  • Vereinigtes Königreich3
  • Deutschland2
  • Frankreich2
  • Belgien2
  • Österreich1
  • Kroatien1

Nach Typ

  • Website24
  • Behörde17
  • Plattform9
  • Hochschule3

🕒 Alle Zeiten in UTC (24 Stunden). Die Dauer reicht von der ersten Offline-Meldung bis zur ersten Wieder-online-Meldung.

Unsere Notiz
LIFULL HOME'SJapanPlattform——OfflineX-Beiträge Real-estate portal reported offline on X in connection with PHP2Shell; the operator has not stated a cause. Our check from outside Japan got a CDN error, which may reflect regional blocking. [Quelle]2026-10-22 08:35 · 403
at homeJapanPlattform——OfflineX-Beiträge Real-estate portal reported in maintenance/offline on X, with posts linking it to PHP2Shell; the operator has not stated a cause. Our check from outside Japan got a bot-check page, so it could not confirm the site's state. [Quelle]2026-10-22 08:41 · 405
SUUMOJapanPlattform——OfflineX-Beiträge Real-estate portal reported offline on X in connection with PHP2Shell. The site shows its own system-maintenance page; the operator has not stated a cause. [Quelle]2026-10-22 08:35 · 503
D66 (Dutch political party)NiederlandeWebsite2h 47mOnlinePHPocalypse Tracker Political party site showed a temporary unavailability page for under three hours. [Quelle]2026-10-22 08:12 · 200
Nespresso Croatia online storeKroatienWebsite15mOnlinePHPocalypse Tracker Online store offline briefly for stated security maintenance. [Quelle]2026-10-22 08:12 · 200
Overheid.nl (Dutch government portal)NiederlandeBehörde12h 20mOnlinePHPocalypse Tracker Government portal offline for maintenance overnight; back the next morning (UTC). [Quelle]2026-10-22 08:12 · 200
French prefecture websitesFrankreichBehörde——OfflinePHPocalypse Tracker Several prefecture sites show a shared maintenance page; others not checked. [Quelle]2026-10-22 08:12 · 200
Belgian Foreign AffairsBelgienBehörde7h 06mOnlinePHPocalypse Tracker Ministry site returned HTTP 503 in four languages; back after midnight (UTC). [Quelle]2026-10-22 08:12 · 302
City of Edinburgh CouncilVereinigtes KönigreichBehörde5h 06mOnlinePHPocalypse Tracker Council site offline for maintenance (HTTP 503) for about five hours. [Quelle]2026-10-22 08:12 · 200
Oxford City CouncilVereinigtes KönigreichBehörde4h 06mOnlinePHPocalypse Tracker Council site offline for maintenance (HTTP 503) for about four hours. [Quelle]2026-10-22 08:12 · 200
Bristol City CouncilVereinigtes KönigreichBehörde1h 21mOnlinePHPocalypse Tracker Council site showed an unavailability notice for under two hours. [Quelle]2026-10-22 08:12 · 200
Port of RotterdamNiederlandeWebsite2h 36mOnlinePHPocalypse Tracker Port authority site temporarily unreachable for under three hours. [Quelle]2026-10-22 08:12 · 301
KNVB (Dutch football association)NiederlandeWebsite1h 41mOnlinePHPocalypse Tracker Football association sites temporarily unreachable for under two hours. [Quelle]2026-10-22 08:12 · 200
PVV (Dutch political party)NiederlandeWebsite8h 36mOnlinePHPocalypse Tracker Political party site offline as a stated precaution until the next morning (UTC). [Quelle]2026-10-22 08:12 · 200
GroenLinks-PvdA (Dutch political party)NiederlandeWebsite1h 36mOnlinePHPocalypse Tracker Political party site offline for under two hours. [Quelle]2026-10-22 08:12 · 403
Acuity SchedulingGlobalPlattform3h 02mOnlinePHPocalypse Tracker Booking platform and login returned HTTP 503 for about three hours, then returned. [Quelle]2026-10-22 08:12 · 200
DriveThruRPGGlobalWebsite7h 11mOnlinePHPocalypse Tracker Digital game store offline for maintenance for about seven hours. [Quelle]2026-10-22 08:12 · 403
Sakura Internet (domains and SSL)JapanPlattform5h 46mOnlinePHPocalypse Tracker Domain and SSL control panel under emergency maintenance; notices do not name PHP; hosting and email unaffected. [Quelle]2026-10-22 08:12 · 200
EFRAG (European Financial Reporting Advisory Group)BelgienBehörde3h 08mOnlinePHPocalypse Tracker Site stopped connecting for about three hours, then returned. [Quelle]2026-10-22 08:12 · 301
DeviantArtGlobalWebsite4h 32mOnlinePHPocalypse Tracker Art community suspended while applying a software update, then returned. [Quelle]2026-10-22 08:12 · 200
DigiDNiederlandeBehörde5h 35mOnlinePHPocalypse Tracker Government login service offline for about six hours, then returned. [Quelle]2026-10-22 08:12 · 200
MijnOverheidNiederlandeBehörde3h 35mOnlinePHPocalypse Tracker Government citizen portal offline for under four hours, then returned. [Quelle]2026-10-22 08:12 · 200
RTL NieuwsNiederlandeWebsite3h 32mOnlinePHPocalypse Tracker News site offline for under four hours, then returned. [Quelle]2026-10-22 08:12 · 302
Follow the MoneyNiederlandeWebsite2h 50mOnlinePHPocalypse Tracker Investigative news site offline for about three hours, then returned. [Quelle]2026-10-22 08:12 · 200
Platform InvesticoNiederlandeWebsite1h 44mOnlinePHPocalypse Tracker Journalism platform offline for under two hours, then returned. [Quelle]2026-10-22 08:12 · 200
Nederlandse Orde van Advocaten (Dutch bar association)NiederlandeBehörde1h 44mOnlinePHPocalypse Tracker Bar association site offline for under two hours, then returned. [Quelle]2026-10-22 08:12 · 200
FC TwenteNiederlandeWebsite5h 50mOnlinePHPocalypse Tracker Football club site offline for about six hours, then returned. [Quelle]2026-10-22 08:12 · 301
Fortuna SittardNiederlandeWebsite4h 05mOnlinePHPocalypse Tracker Football club site offline for about four hours, then returned. [Quelle]2026-10-22 08:12 · 301
Politievakbond ACP (police union)NiederlandeWebsite16h 34mOnlinePHPocalypse Tracker Police union site offline until the next morning (UTC). [Quelle]2026-10-22 08:12 · 301
KNMP (Dutch pharmacists' association)NiederlandeWebsite2h 20mOnlinePHPocalypse Tracker Pharmacists' association site offline for about two hours, then returned. [Quelle]2026-10-22 08:12 · 200
Scouting NederlandNiederlandeWebsite1h 44mOnlinePHPocalypse Tracker Scouting association site offline for under two hours, then returned. [Quelle]2026-10-22 08:12 · 200
Kustwacht (Netherlands Coastguard)NiederlandeBehörde4h 35mOnlinePHPocalypse Tracker Coastguard site showed an unavailability page with emergency numbers; back later that day. [Quelle]2026-10-22 08:12 · 301
Security.NLNiederlandeWebsite6h 05mOnlinePHPocalypse Tracker Security news site switched to maintenance mode, citing PHP2Shell as the reason. [Quelle]2026-10-22 08:12 · 200
easybillDeutschlandPlattform2h 20mOnlinePHPocalypse Tracker Invoicing web app offline (HTTP 503) as a stated precaution; vendor said data was safe. [Quelle]2026-10-22 08:12 · 302
Choice of GamesGlobalWebsite2h 20mOnlinePHPocalypse Tracker Game publisher site showed a temporary 503 page, then returned. [Quelle]2026-10-22 08:12 · 200
CNIL (French data protection authority)FrankreichBehörde——OfflinePHPocalypse Tracker Data protection authority site returns a maintenance page (HTTP 503) with no stated reason. [Quelle]2026-10-22 08:12 · 503
Tweede Kamer (Dutch parliament)NiederlandeBehörde8h 02mOnlinePHPocalypse Tracker Parliament website showed a maintenance notice; back the same evening. [Quelle]2026-10-22 08:12 · 200
NCSC (Dutch national cyber security centre)NiederlandeBehörde7h 02mOnlinePHPocalypse Tracker National cyber security centre site taken offline; back the same evening. [Quelle]2026-10-22 08:12 · 200
Autoriteit Persoonsgegevens (Dutch data protection authority)NiederlandeBehörde——OfflinePHPocalypse Tracker Data protection authority site offline; no recovery recorded by the source. [Quelle]2026-10-22 08:12 · timeout
Valtori (Finnish central government web services)FinnlandBehörde18h 07mOnlinePHPocalypse Tracker Shared government web services offline; recovery recorded the next morning (UTC). [Quelle]2026-10-22 08:12 · timeout
National Land Survey of FinlandFinnlandBehörde——OfflinePHPocalypse Tracker Land survey agency site shown as down; no recovery recorded by the source. [Quelle]2026-10-22 08:12 · 503
University of ViennaÖsterreichHochschule4h 17mOnlinePHPocalypse Tracker University website offline for a few hours, then returned. [Quelle]2026-10-22 08:12 · 200
University of FreiburgDeutschlandHochschule21h 01mOnlinePHPocalypse Tracker Home page carried a computing-centre notice about the PHP flaws; the tracker saw the regular home page again on 22 Oct at 08:10 UTC. [Quelle]2026-10-22 08:24 · 301
Haaga-Helia University of Applied SciencesFinnlandHochschule——OfflinePHPocalypse Tracker University website offline; no recovery recorded by the source. [Quelle]2026-10-22 08:12 · 301
TweakersNiederlandeWebsite4h 59mOnlinePHPocalypse Tracker Tech news site offline for about five hours, then returned. [Quelle]2026-10-22 08:12 · 403
Fur AffinityGlobalWebsite11h 47mOnlinePHPocalypse Tracker Art community offline until late evening (UTC). [Quelle]2026-10-22 08:12 · 403
PinboardGlobalWebsite12h 02mOnlinePHPocalypse Tracker Bookmarking service offline until late evening (UTC). [Quelle]2026-10-22 08:12 · 200
Miraheze (all wikis)GlobalPlattform10h 02mOnlinePHPocalypse Tracker Wiki farm offline across all hosted wikis, then returned. [Quelle]2026-10-22 08:12 · 301
4chanGlobalWebsite11h 47mOnlinePHPocalypse Tracker Imageboard offline until late evening (UTC). [Quelle]2026-10-22 08:12 · 302
NotuBiz council portalsNiederlandePlattform——OfflinePHPocalypse Tracker Council meeting portals run by NotuBiz went offline; reported in connection with PHP2Shell. [Quelle]2026-10-22 08:12 · 301
explain xkcdGlobalWebsite9h 59mOnlinePHPocalypse Tracker Community wiki went offline for several hours, then returned. [Quelle]2026-10-22 08:12 · 301
Star Citizen WikiGlobalWebsite4h 59mOnlinePHPocalypse Tracker Fan wiki taken offline for about five hours, then returned. [Quelle]2026-10-22 08:12 · 200
CodmonJapanPlattform9h 41mOnlinePHPocalypse Tracker Childcare communication service stopped under emergency maintenance; restored by the evening (UTC). [Quelle]2026-10-22 08:12 · 200

„Unsere Prüfung“ ist eine einzelne HTTP-Statusabfrage pro Website zum angegebenen Zeitpunkt – kein Scan, kein Schwachstellentest. 403 oder Timeout kann auch eine Sperre automatischer Anfragen bedeuten.

Eine Website melden, die offline ging

Kennen Sie eine Website, die im Zusammenhang mit PHP2Shell offline ging oder wieder erreichbar ist? Teilen Sie es uns mit. Jede Meldung wird manuell geprüft, bevor sie als „Nutzermeldung (geprüft)“ in der Tabelle erscheint.

Fragen

Wurden diese Websites über PHP2Shell gehackt?

Laut den Quellen nicht. Die meisten zeigten Wartungs- oder Vorsorgehinweise, während sie PHP aktualisierten.

Woher stammen die Daten?

Aus dem gemeinfreien PHPocalypse Tracker; jede Zeile verlinkt die Originalquelle wie einen Bericht oder den Hinweis der Website.

In welcher Zeitzone sind die Zeiten?

In UTC. 17:05 UTC entspricht 19:05 in Berlin (MESZ).

Wie oft wird aktualisiert?

Tagsüber etwa alle 10 Minuten, nach Prüfung neuer Meldungen.