Skip to content
Product
Threat intelligence API
Free key, 70+ endpoints, OpenAPI. The product.
Get started
Pick your stack, make your first call.
Live feed
The console: incidents, filters, entities, search.
Public IOC feed
Free blocklists: domains, IPs, hashes, wallets. No key.
Dark web
First-party leak-site collection: victims and groups.
CLI & agents
tc from a terminal; agent keys with scoped budgets.
Docs
Pricing
No results found
Sign in
Get a free key
No results found
Product
Threat intelligence API
Get started
Live feed
Public IOC feed
Dark web
CLI & agents
Docs
Pricing
Contact
Get a free key
Sign in
Back
ICM2SHELL
Vulnerability
Threat entity extracted from intelligence sources
Nov 4: 0 mentions
Nov 5: 0 mentions
Nov 6: 0 mentions
Nov 7: 0 mentions
Nov 8: 0 mentions
Nov 9: 0 mentions
Nov 10: 5 mentions
Nov 4
Nov 7
Nov 10
Entities
›
vulnerability
›
ICM2SHELL
Frequency
5
occurrences
First Seen
November 10, 2026
Last Seen
November 10, 2026
API
Overview
Recent Events
Profile
Profile
MITRE ATT&CK
1 / 2
Tools Used
PHP2Shell
Related CVEs
CVE-2026-76964
CVE-2026-89126
CVE-2026-120017
CVE-2026-89103
CVE-2026-89119
CVE-2026-109795
CVE-2026-109803
CVE-2026-58231
MITRE Techniques
T1059 - Command and Scripting Interpreter
Affected Platforms
Web Dispatcher
SAP HANA XS
Gateway
SAP NetWeaver
NetWeaver
SAP Gateway
-
REC
Recon
No techniques detected
-
RD
Resource Dev
No techniques detected
-
IA
Initial Access
No techniques detected
1
EX
Execution
T1059 - Command and Scripting Interpreter
-
PE
Persistence
No techniques detected
-
PE
Priv Esc
No techniques detected
-
DE
Defense Evasion
No techniques detected
-
CA
Cred Access
No techniques detected
-
DI
Discovery
No techniques detected
-
LM
Lateral Mov
No techniques detected
-
CO
Collection
No techniques detected
-
C2
C2
No techniques detected
-
EX
Exfil
No techniques detected
-
IM
Impact
No techniques detected
1
techniques detected across
1
tactics
Related Clusters (1)
SAP Patches Four Critical CVSS 10.0 Vulnerabilities on November 2026 Patch Day
5h ago
·
13 sources
72
Related Articles (5)
SAP Patches Critical ICM2SHELL, ProxyGate Vulnerabilities
Feeds.Feedburner
·
1h ago
SAP patches ICM2SHELL and PROXYGATE flaws that allow remote system takeover
Feeds.4Sysops
·
1h ago
Icm2shell Cve 2026 76964 Cve 2026 89126 Sap Netweaver Web Dispatcher Threat Advisory
onapsis.com
·
2h ago
SAP patches four maximum-severity flaws, including Onapsis
Mlq.Ai
·
3h ago
SAP patches ICM2SHELL and PROXYGATE maximum severity flaws
Bleepingcomputer
·
4h ago
Related Entities
Zero-day Exploit
SAP
CVE-2026-76964
CVE-2026-89126
CVE-2026-120017
CVE-2026-89103
CVE-2026-89119
CVE-2026-109795
CVE-2026-109803
CVE-2026-58231
CVE-2026-44756
CVE-2026-109798