PHP2Shell Exploited in Destructive Check Point Gateway Attacks
Teaser from the source
PHP2Shell enabled initial compromise, while CVE-2026-123039 allowed attackers to elevate privileges to root. The post PHP2Shell Exploited in Destructive Check Point Gateway Attacks appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekLinked advisories
- CVE-2026-123039Check Point Quantum Security Gateway: fehlerhafte Berechtigungen für kritische Ressource
- CVE-2026-123039Check Point Quantum Security Gateway: fehlerhafte Berechtigungen für kritische Ressource
- CVE-2026-123039The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An…
- CVE-2026-123039Check Point Security Management und Security Gateway: Mehrere Schwachstellen ermöglichen Erlangen von Administratorrechten
Affected vendors and products
More on Destructive
Other advisories
- Not ratedosv:CVE-2026-104133OpenEMR: Missing authorization in DORN `compendium_install.php` — non-admin destructive lab-compendium reinstall
- Not ratedosv:CVE-2026-62989Shopper: missing variant-delete authorization permits destructive single and bulk actions
- Not ratedosv:CVE-2026-45141Chamilo LMS: CSRF in destructive skill-management AJAX actions
- HighCVE-2026-115477obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP
- Not ratedosv:CVE-2026-115477obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP
- HighCVE-2026-77474Dicklesworthstone Destructive Command Guard: unkontrollierter Ressourcenverbrauch
- HighCVE-2026-77474Dicklesworthstone Destructive Command Guard: unkontrollierter Ressourcenverbrauch
- HighCVE-2026-77474destructive_command_guard (dcg) is a command-line safety tool that blocks destructive shell commands before AI coding agents run them. Prior to 0.6.6, nested…
Other news entries
- As Russia's Cyberwar Evolves, Belarus Steps ForwardNewsDark Reading
- OpenAI's GPT-6.1 Terra is safer overall, but shows more destructive-action flags in testsNewsBleepingComputer
- Russia-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine AttackNewsThe Hacker News
- MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaborationNewsESET WeLiveSecurity
- JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud AttackNewsDark Reading
- JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure ResourcesNewsThe Hacker News
- Claude Code puts auto mode in the driver's seatNewsThe Register — Security
- GigaWiper Lets Threat Actors Choose Their Own Destructive AttackNewsDark Reading
Source: https://www.securityweek.com/php2shell-exploited-in-destructive-check-point-gateway-attacks/
ID