Palo Alto Issues Urgent Advisory on PHP2Shell RCE Flaws Impacting PAN-OS
Palo Alto Networks has confirmed that two critical PHP remote code execution vulnerabilities—tracked as CVE-2026-109618 and CVE-2026-109619—affect PAN-OS and several management interfaces on PA-Series and VM-Series firewalls, as well as Panorama deployments. While the vendor said it is not aware of active malicious exploitation against its products, Unit 42 has observed proof-of-concept exploits for the broader PHP issue known as PHP2Shell, prompting planned hotfixes and guidance to restrict management access…