Summary

PHP2Shell enabled initial compromise, while CVE-2026-123039 allowed attackers to elevate privileges to root. The post PHP2Shell Exploited in Destructive Check Point Gateway Attacks appeared first on SecurityWeek .

For more information, read the full story at the original source: SecurityWeek ↗

Vulnerabilities in this story

• CVE-2026-123039 KEV · fix by 2026-11-16 checkpoint Quantum Security Gateway, checkpoint Quantum Security Management EPSS 1.2% 7.8High

Also reported by

• Network World: The firewall becomes the foothold: Attackers turn Check Point gateways against customers ↗
• The Hacker News: Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files ↗
• Security Affairs: Unpatched Check Point Gateways Are Being Wiped exploiting PHP2Shell ↗
• BleepingComputer: Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiper ↗