HackerFeeds

CyberSecurity News

PHP2Shell Exploited in Destructive Check Point Gateway Attacks

SecurityWeek
· November 13, 2026
Vulnerabilities

AI summary

Attackers exploited PHP2Shell to gain initial access in destructive attacks on Check Point gateways. They then used a vulnerability, identified as CVE-2026-123039, to elevate their privileges to root level.

Vulnerabilities mentioned

CVE-2026-123039
HIGH
CVSS 7.8
CISA KEV

The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root.

Read the full article at SecurityWeekwww.securityweek.com/php2shell-exploited-in-destructive-check-point-gateway-attacks/

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to SecurityWeek.