WORLD WATCH · November 13, 2026 · NEWS
PHP2Shell Exploited in Destructive Check Point Gateway Attacks
The Intel128 wire recorded this event in the news category.
- Reported by
- SecurityWeek, Malware News
- Outlets reporting
- 2
- Category
- NEWS
- Identifiers
- CVE-2026-123039
- Newest report
- November 13, 2026
Plain-English brief. Written for readers who work in a second language.
Key takeaways
- The lead report comes from SecurityWeek.
- 2 outlets reported this event in the same window.
- Intel128 has no independent confirmation of the impact yet.
- PHP2Shell enabled initial compromise, while CVE-2026-123039 allowed attackers to elevate privileges to root. The post PHP2Shell Exploited...
What happened
The report comes from SecurityWeek.
2 outlets reported this event in the same window. The lead item appears below.
- PHP2Shell Exploited in Destructive Check Point Gateway Attacks
- Check Point security advisory (AV26-1154)
- PHP2Shell Exploitation on Check Point Gateway
Why it matters
Intel128 has no independent confirmation of the scale or the impact at this time. Treat every detail as open until a vendor or a national authority publishes an assessment.
What to do
- Check your estate for the product or the version named in the report.
- Apply the vendor patch when the vendor publishes it.
- Put the event on the agenda of your next intelligence meeting.
SOURCE: INTEL128 WORLD WATCH (UPDATED NOV 13, 2026). This brief summarizes reporting by SecurityWeek, Malware News. Intel128 writes the summary and credits the outlet. Read the summary as a starting point, not as a substitute for the original reporting.