https://www.live-feeds.com/feed/attackers-exploit-php2shell-flaws-in-internet-exposed-palo-alto-networks-management-interfacesContinuously updated, source-cited coverage. https://www.live-feeds.com/feed/attackers-exploit-php2shell-flaws-in-internet-exposed-palo-alto-networks-management-interfaceshttps://www.live-feeds.com/feed/attackers-exploit-php2shell-flaws-in-internet-exposed-palo-alto-networks-management-interfaces#u174266Wed, 04 Nov 2026 13:21:16 +0000Threat actors are actively exploiting critical PHP2Shell vulnerabilities against internet-exposed Palo Alto Networks PAN-OS management interfaces. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619 with CVSS scores of 9.2, allow unauthenticated remote code execution on systems running affected PHP versions. Attackers have chained these security gaps with a Linux kernel flaw to gain root privileges on target firewalls. Palo Alto Networks urges organizations to apply security updates and secure management interfaces immediately, as other vendor products may also be affected.Why it matters