Initially published Oct 21st at 6 AM PT- last updated 8:40AM PT Patch Now: Ensure you are up to date with the latest version IPS protection- CPAI-2026-15172 – Check Point Software. PHP Remote Code Execution (CVE-2026-109618, CVE-2026-109619). Check Point WAF protects against this threat How does Check Point protect you? Check Point Intrusion Prevention System (IPS): IPS protection was just released to active this evening – PHP Remote Code Execution (CVE-2026-109618, CVE-2026-109619). Always Make sure gateways pull IPS updates automatically and set new critical protections to Prevent, not Detect. Watch Check Point Advisories for a new CPAI entry covering these […]
Read the original article:
PHP2Shell: Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619)