Summary

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Check Point and UnrealIRCd vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Below are the flaws added to the catalog: CVE-2026-114713 (CVSS score of 8.6) is a…

For more information, read the full story at the original source: Security Affairs ↗

Vulnerabilities in this story

• CVE-2026-109618 KEV · fix by 2026-10-29 PHP Group PHP, Siemens AMIS TS, Siemens Energy Engage EPSS 99.9% 9.2Critical
• CVE-2026-109619 KEV · fix by 2026-10-29 PHP Group PHP, Siemens AMIS TS, Siemens Energy Engage EPSS 99.9% 9.2Critical
• CVE-2026-114713 KEV · fix by 2026-11-16 UnrealIRCd UnrealIRCd EPSS 0.5% 8.6High
• CVE-2026-123039 KEV · fix by 2026-11-16 checkpoint Quantum Security Gateway, checkpoint Quantum Security Management EPSS 2.1% 7.8High

Also reported by

• The Hacker News: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection ↗
• Network World: The firewall becomes the foothold: Attackers turn Check Point gateways against customers ↗
• BleepingComputer: Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiper ↗
• SecurityWeek: PHP2Shell Exploited in Destructive Check Point Gateway Attacks ↗