Skip to content
Product
Threat intelligence API
Free key, 70+ endpoints, OpenAPI. The product.
Get started
Pick your stack, make your first call.
Live feed
The console: incidents, filters, entities, search.
Public IOC feed
Free blocklists: domains, IPs, hashes, wallets. No key.
Dark web
First-party leak-site collection: victims and groups.
CLI & agents
tc from a terminal; agent keys with scoped budgets.
Docs
Pricing
No results found
Sign in
Get a free key
No results found
Product
Threat intelligence API
Get started
Live feed
Public IOC feed
Dark web
CLI & agents
Docs
Pricing
Contact
Get a free key
Sign in
Back
PHP2Shell Vulnerability
Vulnerability
Threat entity extracted from intelligence sources
Nov 8: 0 mentions
Nov 9: 0 mentions
Nov 10: 0 mentions
Nov 11: 0 mentions
Nov 12: 0 mentions
Nov 13: 1 mention
Nov 14: 0 mentions
Nov 8
Nov 11
Nov 14
Entities
›
vulnerability
›
PHP2Shell Vulnerability
Frequency
2
occurrences
First Seen
November 2, 2026
Last Seen
November 13, 2026
API
Overview
Recent Events
Profile
Profile
MITRE ATT&CK
1 / 2
Associated Malware
TSGA Backdoor
TSProxy Malware
Related CVEs
CVE-2026-109618
CVE-2026-109619
CVE-2026-123039
MITRE Techniques
T1021 - Remote Services
T1059 - Command and Scripting Interpreter
T1068 - Exploitation for Privilege Escalation
T1505.003 - Web Shell
Affected Platforms
PHP
VMware ESXi
-
REC
Recon
No techniques detected
-
RD
Resource Dev
No techniques detected
-
IA
Initial Access
No techniques detected
1
EX
Execution
T1059 - Command and Scripting Interpreter
1
PE
Persistence
T1505.003 - Web Shell
1
PE
Priv Esc
T1068 - Exploitation for Privilege Escalation
-
DE
Defense Evasion
No techniques detected
-
CA
Cred Access
No techniques detected
-
DI
Discovery
No techniques detected
1
LM
Lateral Mov
T1021 - Remote Services
-
CO
Collection
No techniques detected
-
C2
C2
No techniques detected
-
EX
Exfil
No techniques detected
-
IM
Impact
No techniques detected
4
techniques detected across
4
tactics
Related Clusters (1)
Check Point CVE-2026-123039 Exploited for Local Root Access
1d ago
·
8 sources
69
Related Articles (2)
Check Point warns of zero-day flaw exploited to gain root access | Межа
Mezha
·
1d ago
Anti-Myth: How Will Humanity Respond When the Artificial Intelligence Crisis Strikes? - 36氪
Eu.36Kr
·
Nov 2
Related Entities
Command Injection
Data Breach
Malware
Sql Injection
CVE-2026-109618
CVE-2026-109619
CVE-2026-123039
CWE-269 - Improper Privilege Management
CWE-89 - SQL Injection
TSGA Backdoor
TSProxy Malware
T1021 - Remote Services
