PHP2Shell Exploited in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Storage
RedSide Security November 13, 2026 Cyber Attacks 85 views
An unknown actor chained the PHP2Shell vulnerabilities with a new Gaia OS privilege escalation to backdoor Check Point Security Gateways with TSGA and wipe files on ESXi hosts, starting with Israeli organizations on October 30, 2026.
Continue reading: PHP2Shell Exploited in Check Point Gateways to Dep…
