Tag

PHP2Shell

6 stories

Panic on the Management Plane: PHP2Shell Exploitation Hits PAN-OS Interfaces

Palo Alto Networks has confirmed active exploitation of PHP2Shell vulnerabilities against PAN-OS management interfaces that were exposed to the internet. In an October 29, 2026 update, Unit 42 verified that attackers combined the PHP flaws with a Linux kernel vulnerability to escalate from remote code execution to full root access on affected systems. The vendor says the attack surface was limited to publicly reachable management HTTPS interfaces and the XML…

Saugata DattaOct 30, 20263 min read182

Azure

AI-Assisted PHP2Shell and Fragnesia Chain Roots 25 Servers, Penetrates U.S. Government-Affiliated Network

Cybersecurity researchers have detailed an AI-assisted campaign that combined PHP2Shell exploitation with a Linux kernel privilege escalation to gain root on 25 servers and pivot into an internal network tied to a U.S. government-affiliated environment. The activity was observed in late October 2026 and, according to the Israeli firm Dream, demonstrates a tailored, multi-stage intrusion that fused custom exploit development with automated reconnaissance at scale. Attack overview Dream attributes the…

Saugata DattaOct 29, 20264 min read221

Cybersecurity

PHP2Shell and the PHP scare that nearly stopped the web

On Wednesday, a pair of long-dormant vulnerabilities in PHP sparked an emergency scramble across the internet. The bugs—dubbed PHP2Shell and assigned CVE‑2026‑109618 and CVE‑2026‑109619—allow unauthenticated remote code execution on affected systems. Once researchers demonstrated exploitability, vendors and web hosts rushed to apply patches released by the PHP Foundation, while companies and governments warned users and some organizations temporarily took services offline to protect themselves. What happened Security researchers at Calif…

Saugata DattaOct 24, 20264 min read263

Cybersecurity

Palo Alto Issues Urgent Advisory on PHP2Shell RCE Flaws Impacting PAN-OS

Palo Alto Networks has confirmed that two critical PHP remote code execution vulnerabilities—tracked as CVE-2026-109618 and CVE-2026-109619—affect PAN-OS and several management interfaces on PA-Series and VM-Series firewalls, as well as Panorama deployments. While the vendor said it is not aware of active malicious exploitation against its products, Unit 42 has observed proof-of-concept exploits for the broader PHP issue known as PHP2Shell, prompting planned hotfixes and guidance to restrict management access…

Saugata DattaOct 24, 20264 min read251

Hacking and Exploits

PHP2Shell Proof-of-Concept Goes Public — Potassium Botnet Attempts and What Defenders Should Do

Public proof-of-concept code for two critical PHP vulnerabilities—collectively dubbed PHP2Shell—has been released, and security teams have observed scanning and failed attempts to use the flaws to deliver botnet malware. While attempted exploitation is concerning, researchers stress that scans and blocked deliveries are not the same as confirmed successful compromises. The key takeaways are straightforward: review runtime configurations, apply the issued PHP fixes, and treat detection telemetry carefully so you don’t…

Saugata DattaOct 23, 20264 min read281

Cybersecurity

PHP’s New Warning: Narrow Unpatched RCE Path After PHP2Shell Fixes

PHP released a short advisory on October 23 warning of a separate, unlikely path that could let an attacker run code on a web server — just two days after emergency fixes for the critical PHP2Shell flaws. While the newly disclosed issue (CVE-2026-115560) is not being treated as an emergency, administrators should understand the configuration that creates the risk, confirm whether their apps are affected, and apply the recommended mitigation…

Saugata DattaOct 23, 20264 min read286

Panic on the Management Plane: PHP2Shell Exploitation Hits PAN-OS Interfaces

AI-Assisted PHP2Shell and Fragnesia Chain Roots 25 Servers, Penetrates U.S. Government-Affiliated Network

PHP2Shell and the PHP scare that nearly stopped the web

Palo Alto Issues Urgent Advisory on PHP2Shell RCE Flaws Impacting PAN-OS

PHP2Shell Proof-of-Concept Goes Public — Potassium Botnet Attempts and What Defenders Should Do

PHP’s New Warning: Narrow Unpatched RCE Path After PHP2Shell Fixes

Free Tools: IP, DNS, SSL