gcdRadar
tags/Stacks and products

php2shell

2 live · 4 on record · last incident 1 day ago

Dec ’25records per month, by first reportNov ’26

Live2

  1. live7.8
    Check Point Gateway CVE-2026-123039: Check Point Gateway Exploited in Destructive Attacks

    Patch now · Exploited · Patched · since 13 Nov 2026 · CVE-2026-123039

    Attackers exploited PHP2Shell for initial compromise alongside CVE-2026-123039 to elevate privileges to root on Check Point Gateways. The targeted attacks resulted in destructive gateway impacts.

    Do:Apply the emergency hotfixes provided by the vendor immediately.

  2. live9.8
    Palo Alto Firewalls PHP2Shell Attacks Target Palo Alto Firewalls

    Patch now · Exploited · No patch yet · since 30 Oct 2026

    Threat actors are actively exploiting critical PHP vulnerabilities known as PHP2Shell to target Palo Alto firewalls. Millions of instances remain potentially exposed following more than a week of active attacks.

    Do:Apply available security patches or mitigation measures immediately.

Earlier2

  1. closed
    PHP2Shell China-Nexus Attack Using PHP2Shell Breaches U.S. Government-Affiliated Network

    Breaches & attacks · Exploited · since 25 Oct 2026

  2. closed
    China-Linked Hackers Exploit PHP2Shell to Root Firewalls

    Breaches & attacks · Exploited · since 28 Oct 2026