PHP2Shell Exploitation on Check Point Gateway
Linked advisories
- CVE-2026-109618Critical vulnerabilities in PHP
- CVE-2026-109619PHP Group PHP — PHP Stale Internal Request-State Vulnerability
- CVE-2026-109618PHP2Shell core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)
- CVE-2026-109618Security update for php8
- CVE-2026-109618Debian LTS php8.2: security update
- CVE-2026-109618PHP: Use-After-Free
- CVE-2026-109618Security update for php8
- CVE-2026-109618PHP: Mehrere Schwachstellen ermöglichen Codeausführung
- CVE-2026-109618Security update for php8
- CVE-2026-109618Alert Regarding Multiple Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619)
- CVE-2026-123039Check Point Quantum Security Gateway: fehlerhafte Berechtigungen für kritische Ressource
- CVE-2026-109618Siemens ProductCERT Advisory SSA-566435
- CVE-2026-109618Critical security issue affecting PHP
- CVE-2026-109618Red Hat Security Advisory: php:8.2 security update
- CVE-2026-109618Siemens ProductCERT Advisory SSA-566512
- CVE-2026-109618Vulnerabilities in PHP Affecting Cisco Products: October 2026
- CVE-2026-109618Security update for php7
- CVE-2026-109618Red Hat Security Advisory: php security update
- CVE-2026-109618PHP Group PHP — PHP Memory Corruption Vulnerability
- CVE-2026-109618PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for t…
- CVE-2026-123039Check Point Quantum Security Gateway: fehlerhafte Berechtigungen für kritische Ressource
- CVE-2026-109618Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.31.0 Release.
- CVE-2026-109619RCE via stale global state
- CVE-2026-109618RCE via OOM corruption
- CVE-2026-109618PHP2Shell: critical unauthenticated RCE in PHP core
- CVE-2026-109618Red Hat Security Advisory: php8.4 security update
- CVE-2026-109618Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products
- CVE-2026-109619RCE via stale global state
- CVE-2026-109618Security update for php74
- CVE-2026-109618Siemens ProductCERT Advisory SSA-166980
- CVE-2026-109618Critical Vulnerabilities in PHP (PHP2Shell)
- CVE-2026-109618RCE via OOM corruption
- CVE-2026-109618UPDATED: CVE-2026-109618 and CVE-2026-109619 affecting PHP
- CVE-2026-109618Debian php8.4: security update
- CVE-2026-123039The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An…
- CVE-2026-109618PHP Multiple Vulnerabilities
- CVE-2026-109619RCE via stale global state
- CVE-2026-109619PHP: Use-After-Free
- CVE-2026-109618Active Exploitation of PHP2Shell Vulnerabilities Affecting Network and Security Products
- CVE-2026-109618Red Hat Security Advisory: php:8.2 security update
- CVE-2026-109618Red Hat Security Advisory: php security update
- CVE-2026-109618Red Hat Security Advisory: php:8.3 security update
- CVE-2026-109618PHP vulnerabilities
- CVE-2026-109618Red Hat Security Advisory: php:7.4 security update
- CVE-2026-109619PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated a…
- CVE-2026-123039Check Point Security Management und Security Gateway: Mehrere Schwachstellen ermöglichen Erlangen von Administratorrechten
- CVE-2026-109618RCE via OOM corruption
- CVE-2026-109618Security Advisory 2026-018 — Critical Vulnerabilities in PHP
- CVE-2026-109618PHP vulnerabilities
- CVE-2026-109618Security update for php8
Affected vendors and products
- Check Point Security Gateway
- Check Point Security Management
- Check Point Quantum Security Gateway
- Check Point Quantum Security Management
- Debian Php8.2
- Debian Php8.4
- Palo Alto Networks Palo Alto Networks PAN-OS
- PHP Group PHP
- PHP Group PHP
- Siemens Energy Engage
- Siemens Ruggedcom Ape1808 Firmware
- Siemens Siemens Spectrum Power 4
More on PHP2Shell
Other advisories
- CriticalCVE-2026-109618Active Exploitation of PHP2Shell Vulnerabilities Affecting Network and Security Products
- CriticalCVE-2026-109618PHP2Shell core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)
- CriticalCVE-2026-109618Critical Vulnerabilities in PHP (PHP2Shell)
- CriticalCVE-2026-109618PHP2Shell: critical unauthenticated RCE in PHP core
- CriticalCVE-2026-46300Linux kernel Fragnesia root exploit (CVE-2026-46300) added to CISA KEV, already used in a PHP2Shell firewall campaign
Other news entries
- Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperNewsBleepingComputer
- Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi FilesNewsThe Hacker News
- PHP2Shell Exploited in Destructive Check Point Gateway AttacksNewsSecurityWeek
- (g+) Sicherheitslücke in der Firmware: PHP2Shell bleibt in Firewalls und Industriegeräten gefährlichNewsGolem.de — Security
- AI agents are a 'bane' for some website operators, says CloudflareNewsThe Register — Security
- PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPressNewsSecurityWeek
- This month in security with Tony Anscombe – October 2026 editionNewsESET WeLiveSecurity
- PHP2Shell plus Fragnesia: A dangerous new route from web server to rootNewsCSO Online
Source: https://research.checkpoint.com/2026/php2shell-exploitation-on-check-point-gateway/
ID