Ivanti

Friday 13 November 2026

PHP2Shell Flaws Used to Break Into Check Point Gateways and Wipe an ESXi Host

IncidentsExploitedCVE-2026-109618CVSS 9.25 min read13:18 UTC

Check Point says attackers chained the PHP2Shell RCE bugs with a local privilege escalation to reach root, then deployed webshells, a backdoor framework and a wiper. It can't say who did it.

Monday 2 November 2026

Ivanti adds two more Connect Secure flaws to an exploited chain

VulnerabilitiesExploitedCVE-2026-104935CVSS 8.62 min read11:35 UTC

Ivanti updated its advisory on October 29 to add a privilege escalation bug and a file upload bug, both now fixed and both in CISA's KEV list. Volexity says the chain was used against an appliance from October 3.