NewsThe Hacker News
Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files
More on PHP2Shell
Other advisories
- CriticalCVE-2026-109618Active Exploitation of PHP2Shell Vulnerabilities Affecting Network and Security Products
- CriticalCVE-2026-109618PHP2Shell core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)
- CriticalCVE-2026-109618Critical Vulnerabilities in PHP (PHP2Shell)
- CriticalCVE-2026-109618PHP2Shell: critical unauthenticated RCE in PHP core
- CriticalCVE-2026-46300Linux kernel Fragnesia root exploit (CVE-2026-46300) added to CISA KEV, already used in a PHP2Shell firewall campaign
Other news entries
- PHP2Shell Exploited in Destructive Check Point Gateway AttacksNewsSecurityWeek
- PHP2Shell Exploitation on Check Point GatewayNewsCheck Point Research
- (g+) Sicherheitslücke in der Firmware: PHP2Shell bleibt in Firewalls und Industriegeräten gefährlichNewsGolem.de — Security
- AI agents are a 'bane' for some website operators, says CloudflareNewsThe Register — Security
- PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPressNewsSecurityWeek
- This month in security with Tony Anscombe – October 2026 editionNewsESET WeLiveSecurity
- PHP2Shell plus Fragnesia: A dangerous new route from web server to rootNewsCSO Online
- Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 serversNewsThe Register — Security
Source: https://thehackernews.com/2026/11/hackers-exploit-php2shell-flaws-in.html
ID