pwned.coffeeUpdated 23 min ago

Today's specials

pwned.coffeeOrder ticket · today's special · 13 Nov 2026

Americano · 183°ChighOrder up · fix available

PHP2Shell: Check Point Gateway attacks

Check Point Quantum Security Gateway

PHP2Shell exploited in destructive Check Point Gateway attacks, allowing privilege escalation to root

Do this now

Apply the R82.20 Jumbo Hotfix above Take 10 to Check Point Quantum Security Gateway R82.20 and later, apply the R82.10 Jumbo Hotfix above Take 50 to Check Point Quantum Security Gateway R82.10 and later, apply the R82 Jumbo Hotfix above Take 130 to Check Point Quantum Security Gateway R82 and later, apply the R81.20 Jumbo Hotfix above Take 173 to Check Point Quantum Security Gateway R81.20 and later, apply the R82.20 Jumbo Hotfix above Take 10 to Check Point Quantum Security Gateway R82.20 and later, apply the R82.10 Jumbo Hotfix above Take 50 to Check Point Quantum Security Gateway R82.10 and later, apply the R82 Jumbo Hotfix above Take 130 to Check Point Quantum Security Gateway R82 and later and apply the R81.20 Jumbo Hotfix above Take 173 to Check Point Quantum Security Gateway R81.20 and later.

Who should check: teams running VPN & firewalls

Fix it

Quantum Security Gateway

  • On 81.20.xUpgrade to Quantum Security Gateway R81.20 Jumbo Hotfix above Take 173
  • On 82.xUpgrade to Quantum Security Gateway R82 Jumbo Hotfix above Take 130
  • On 82.10.xUpgrade to Quantum Security Gateway R82.10 Jumbo Hotfix above Take 50
  • On 82.20.xUpgrade to Quantum Security Gateway R82.20 Jumbo Hotfix above Take 10

Quantum Security Management

  • On 81.20.xUpgrade to Quantum Security Management R81.20 Jumbo Hotfix above Take 173
  • On 82.xUpgrade to Quantum Security Management R82 Jumbo Hotfix above Take 130
  • On 82.10.xUpgrade to Quantum Security Management R82.10 Jumbo Hotfix above Take 50
  • On 82.20.xUpgrade to Quantum Security Management R82.20 Jumbo Hotfix above Take 10
First seen
Last update
Fixed in
  • Quantum Security Gateway R82.20 Jumbo Hotfix above Take 10
  • Quantum Security Gateway R82.10 Jumbo Hotfix above Take 50
  • Quantum Security Gateway R82 Jumbo Hotfix above Take 130
  • Quantum Security Gateway R81.20 Jumbo Hotfix above Take 173
  • Quantum Security Management R82.20 Jumbo Hotfix above Take 10
  • Quantum Security Management R82.10 Jumbo Hotfix above Take 50
  • Quantum Security Management R82 Jumbo Hotfix above Take 130
  • Quantum Security Management R81.20 Jumbo Hotfix above Take 173
Identifiers
CVSS
7.8
Source
news
On the menu as

Timeline

  1. Fix status: unknown → patched.

  2. First reported.

Receipt

Exploitation
No known exploitation
Fix by release line
ProductAffectedFixed inSource
Quantum Security GatewayR82.20 to before R82.20 Jumbo Hotfix above Take 10R82.20 Jumbo Hotfix above Take 10CVE record (CNA) checked
Quantum Security GatewayR82.10 to before R82.10 Jumbo Hotfix above Take 50R82.10 Jumbo Hotfix above Take 50CVE record (CNA) checked
Quantum Security GatewayR82 to before R82 Jumbo Hotfix above Take 130R82 Jumbo Hotfix above Take 130CVE record (CNA) checked
Quantum Security GatewayR81.20 to before R81.20 Jumbo Hotfix above Take 173R81.20 Jumbo Hotfix above Take 173CVE record (CNA) checked
Quantum Security ManagementR82.20 to before R82.20 Jumbo Hotfix above Take 10R82.20 Jumbo Hotfix above Take 10CVE record (CNA) checked
Quantum Security ManagementR82.10 to before R82.10 Jumbo Hotfix above Take 50R82.10 Jumbo Hotfix above Take 50CVE record (CNA) checked
Quantum Security ManagementR82 to before R82 Jumbo Hotfix above Take 130R82 Jumbo Hotfix above Take 130CVE record (CNA) checked
Quantum Security ManagementR81.20 to before R81.20 Jumbo Hotfix above Take 173R81.20 Jumbo Hotfix above Take 173CVE record (CNA) checked
Score
CVSS 7.8 (high). CVSS 3.1 7.8 (CNA checkpoint) for CVE-2026-123039
Last checked

Sources: KEV – CVE record ✓ Vendor ✓

Sources

Totalone hot coffee