Palo Alto Networks warns of active exploitation targeting exposed management interfaces via PHP2Shell vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619.
Threat actors have been spotted chaining these flaws with local privilege escalation bugs to achieve root access on internet-facing servers.
The problems are found in the software versions used to manage the company's systems. When administrative screens are accessible directly from the internet, attackers can exploit the loopholes to execute commands remotely without needing a password.
Which systems are most at risk?
The company noted that the risk is greater when access is allowed from external addresses on the Internet. The issue mainly affects the web management screen and related services, and concerns specific versions of the PAN-OS software.
Measures and updates
The US CISA Agency added the issues to the list of known problems exploited in attacks, asking the relevant agencies to implement the necessary fixes.
↳
READ ALSO
HACKS.GR / RELATED
Vulnerabilities & Security Updates
How small design flaws in Microsoft Edge could give you control over your computer
↗
Palo Alto Networks has begun releasing updates for affected versions and is recommending temporary measures, such as restricting access to only trusted internal addresses.
G
HACKS.GR / GOOGLE SEARCH
Hacks.gr on Google
Set Hacks.gr as a preferred source.
Preferred source
↗
end of article
Top comments (0)