Check Point Mobile Access

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenNov 13, 2026
Last mentioned1d ago

Timeline

2 articles · newest first

PHP2Shell exploited in destructive Check Point gateway attacks

Waves from October 30 and November 2 used two PHP RCE flaws and a DynamicCLI bug to reach root and deploy a wiper.

SecurityWeekupdated 09:08 UTC · 4h agofirst Nov 13, 07:39 UTC · 1d agoExploit / PoCExploited14 sourcesCVE-2026-109618 CVE-2026-109619 CVE-2026-1230392 · 1 read

Check Point firewall flaws chained for root access and ESXi wiper

Check Point says a couple of dozen customers were hit in two waves from October 30, with wipers used against some Israeli targets.

Cyber Security Newsupdated 09:08 UTC · 4h agofirst Nov 13, 06:38 UTC · 1d agoExploit / PoCExploited14 sourcesCVE-2026-109618 CVE-2026-109619 CVE-2026-1230392 · 1 read

Related CVEs

by mentions

CVE-2026-109619100%9.2
Use-after-free RCE in PHP via stale request globals
published 23d agophpKEVPoC ×18
CVE-2026-109618100%9.2
OOM longjmp memory flaw enabling RCE in PHP
published 23d agophpKEVPoC ×25
CVE-2026-1230391%7.8
Local root command execution via Gaia OS DynamicCLI socket
published 1d agoCheck Point Gaia OS DynamicCLIKEV

Appears with

TSGAmalware · 2
VMware ESXiproduct · 2
PhiliKitmalware · 2
TSProxymalware · 2
Check Pointvendor · 2
destroy_v6malware · 1
Check Point Gatewayproduct · 1
Gaiaproduct · 1
Check Point Researchorganization · 1
Dream Securityorganization · 1
DynamicCLIproduct · 1
PHPproduct · 1
VMwarevendor · 1

Entities are extracted by the model from each article. First seen Nov 13, 2026, last mentioned 1d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.