PHP2Shell Flaws Used to Break Into Check Point Gateways and Wipe an ESXi Host
IncidentsExploitedCVE-2026-109618CVSS 9.25 min read
Check Point says attackers chained the PHP2Shell RCE bugs with a local privilege escalation to reach root, then deployed webshells, a backdoor framework and a wiper. It can't say who did it.