Hackers Exploit Check Point PHP2Shell Flaws to Gain Root Access and Deploy Wiper Malware

Attackers are exploiting a remote code execution vulnerability in PHP2Shell, combined with a newly disclosed local privilege escalation flaw, to take over unpatched Check Point Security Gateways. This lets them gain root access and, in some cases, wipe VMware ESXi hosts. Check Point has reported active exploitation of the second flaw, identified as CVE-2026-123039, affecting […]

Read the original article:

Hackers Exploit Check Point PHP2Shell Flaws to Gain Root Access and Deploy Wiper Malware