Palo Alto Networks Warns of Active Exploitation of PHP2Shell Vulnerabilities

Palo Alto Networks has alerted users to active exploitation of recently patched PHP2Shell vulnerabilities (CVE-2026-109618, CVE-2026-109619) targeting internet-exposed management interfaces. These critical flaws, rated 9.2 CVSS, enable unauthenticated remote code execution. CISA has also added a related Linux kernel privilege escalation bug (CVE-2026-46300) to its Known Exploited Vulnerabilities catalog, urging federal agencies to apply necessary fixes to mitigate risks.