Check Point and PHP2Shell

The statement

Read the statement on support.checkpoint.com, dated Created 2026-10-21; last modified 2026-10-22. Source type: official page.

Notes

sk1000302 Check Point Response to CVE-2026-109618 and CVE-2026-109619 - PHP vulnerabilities may allow Remote Code Execution through Firewall web interfaces. Affected when Mobile Access Portal, Remote Access VPN with SSL Network Extender, Remote Access VPN with SAML Realm or Identity Awareness Captive Portal is enabled: Force Firewalls R81.20, R82, R82.10, R82.20 (R80 to R81.10 EoS also listed) and Spark Firewalls R81.10.x, R82.00.x (R77.20.x, R80.20.x EoS also listed). Automatic mitigation via Automatic Updates before 22 Oct 2026 21:00 GMT; manual cp-httpd.conf procedures restart portal services; IPS signature on R82.20. The fix is planned for the release on November 11, 2026, as part of the Jumbo Hotfix Accumulators. and Check Point Portal and SaaS services are already patched against these vulnerabilities. quoted from the statement URL. No fix stated for EoS versions.

Change log

• 23 October 2026: first check

Submit a correction or your statement

Submit a correction or your statement. We list a statement only once we have opened it on your own domain or verified official account. Disputes follow the dispute policy. Or email the statement link to index@broadcastwell.com.

Badge

The badge for Check Point reads PHP2Shell statement listed, Verified 23 October 2026, Broadcastwell, and links to this record. Badge and embed code · Badge terms.

Check Point's customers can ask us for the PHP2Shell Record Check: we capture what ChatGPT, Claude, Perplexity, Google AI Overviews and Google AI Mode say about Check Point and PHP2Shell, trace every wrong or missing statement to its source and deliver a statement page in the format the engines quote. Record Check $490 once.