Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces

Palo Alto Networks warned Wednesday that threat actors are actively exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible management interfaces. The company updated its advisory to confirm active exploitation targeting internet-exposed management interfaces. The vulnerabilities, tracked as CVE-2026-XXXX, allow remote code execution, and Palo Alto urges immediate patching of affected devices to prevent compromise.