Palo Alto confirms PHP2Shell attacks on exposed PAN-OS management
Unit 42 verified tools that pair the PHP flaws with kernel bug CVE-2026-46300 for root; about 0.02% of the installed base was exposed.
86
Product
VM-Series
- Mentions · 7d1
- Mentions · 30d8
- All mentions11
- First seenSep 8, 2026
- Last mentioned17h ago
Timeline
11 articles · newest firstCISA Warns of Palo Alto Networks PAN-OS Code Injection Vulnerability Exploited in Attacks
CISA added PAN-OS code injection flaw CVE-2026-0322 to the KEV catalog after real-world attacks; federal agencies must mitigate by October 17.
80
Palo Alto Warns of PAN-OS 0-day Flaw Actively Exploited in Attacks
Palo Alto says attackers are exploiting CVE-2026-0322, an authenticated PAN-OS management RCE that yields root.
84
Attackers exploit Palo Alto PAN-OS flaw for root access as CISA orders three-day fix
Attackers are exploiting PAN-OS CVE-2026-0322 for root access; CISA set a three-day fix.
82
Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution
Palo Alto patched PAN-OS zero-day CVE-2026-0322 after limited exploitation for root remote code execution.
84
Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
Palo Alto patches exploited PAN-OS management RCE CVE-2026-0322; CISA set an October 17 deadline.
82
Hackers Exploit Palo Alto PAN-OS 0-day Flaw to Gain Root Code Execution on Firewalls
Attackers are exploiting PAN-OS CVE-2026-0322 for limited root code execution through the management interface.
78
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
Palo Alto says attackers are exploiting PAN-OS RCE CVE-2026-0322, which CISA added to KEV.
84
Palo Alto PAN-OS Buffer Overflow Lets Attackers Execute Arbitrary Code as Root
Palo Alto Networks fixed CVE-2026-0310, a CVSS 9.2 unauthenticated PAN-OS buffer overflow enabling root code execution on PA-Series firewalls.
78
Palo Alto PAN-OS Vulnerability Enables Arbitrary Code Execution as Root User
Palo Alto Networks patched CVE-2026-0310, an unauthenticated XML-processing buffer overflow in PAN-OS allowing root code execution on PA-Series firewalls.
62
2026-006: Critical Vulnerability in PAN-OS
Palo Alto Networks PAN-OS User-ID Authentication Portal flaw allows unauthenticated root RCE; limited exploitation observed and patches still pending.
66
Related CVEs
by mentions- CVE-2026-03222%8.6Authenticated root RCE in Palo Alto PAN-OS management
- Buffer Overflow in PAN-OS XML Processing Enables Root RCE on PA-Series Firewalls
- CVE-2026-765192%9.8Relative Path Traversal to Root RCE in Cisco Secure Email Gateway
- CVE-2026-030042%9.3Unauthenticated Out-of-bounds Write RCE in Palo Alto Networks PAN-OS
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2025-010898%8.8Authentication Bypass in Palo Alto Networks PAN-OS Management Interface
- CVE-2026-4630016%7.8Shared-frag marker loss in Linux kernel skb coalescing (LPE)
Appears with
- Palo Alto Networksvendor · 11
- PAN-OSproduct · 11
- PA-Seriesproduct · 11
- Palo Alto Networksorganization · 9
- Panoramaproduct · 8
- CISAorganization · 5
- Prisma Accessproduct · 4
- Cloud NGFWproduct · 4
- Unit 42organization · 1
- CERT-EUvendor · 1
- Cisco Secure Email Gatewayproduct · 1
- Ciscoorganization · 1
- GlobalProtectproduct · 1
- PHPproduct · 1
- CERT-EUorganization · 1
- PHP Groupvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.