{
 "Event": {
  "uuid": "0a26bd3c-facd-5ce6-9f32-fb471863bc3d",
  "info": "PHP2Shell Exploitation on Check Point Gateway",
  "date": "2026-11-12",
  "threat_level_id": "1",
  "analysis": "0",
  "distribution": "3",
  "published": false,
  "Orgc": {
   "name": "SecurityStudies.info"
  },
  "Tag": [
   {
    "name": "tlp:clear"
   },
   {
    "name": "securitystudies:status=\"detected-unreviewed\""
   },
   {
    "name": "securitystudies:type=\"exploitation\""
   },
   {
    "name": "misp-galaxy:threat-actor=\"UTA0178\""
   }
  ],
  "Attribute": [
   {
    "type": "link",
    "category": "External analysis",
    "value": "https://securitystudies.info/cyber/incidents/php2shell-exploitation-on-check-point-gateway-20261112/",
    "comment": "SecurityStudies.info entry",
    "to_ids": false
   },
   {
    "type": "link",
    "category": "External analysis",
    "value": "https://research.checkpoint.com/2026/php2shell-exploitation-on-check-point-gateway/",
    "comment": "Check Point Research",
    "to_ids": false
   },
   {
    "type": "vulnerability",
    "category": "External analysis",
    "value": "CVE-2026-109618",
    "to_ids": false
   },
   {
    "type": "vulnerability",
    "category": "External analysis",
    "value": "CVE-2026-109619",
    "to_ids": false
   },
   {
    "type": "vulnerability",
    "category": "External analysis",
    "value": "CVE-2026-123039",
    "to_ids": false
   },
   {
    "type": "text",
    "category": "Other",
    "value": "Detected automatically from 1 article in 1 outlet (Check Point Research), Nov 12, 2026. Type: exploitation. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
    "comment": "summary",
    "to_ids": false
   }
  ]
 }
}