Panic on the Management Plane: PHP2Shell Exploitation Hits PAN-OS Interfaces
Palo Alto Networks has confirmed active exploitation of PHP2Shell vulnerabilities against PAN-OS management interfaces that were exposed to the internet. In an October 29, 2026 update, Unit 42 verified that attackers combined the PHP flaws with a Linux kernel vulnerability to escalate from remote code execution to full root access on affected systems. The vendor says the attack surface was limited to publicly reachable management HTTPS interfaces and the XML…