Security2 hOctober 22, 2026, 17:22

PHP2Shell: PAN-OS and Panorama affected, Fortinet and Cisco still investigating

Palo Alto Networks confirmed that all versions of PAN-OS and Panorama are affected by the critical PHP2Shell PHP vulnerabilities, with no fixed releases yet. Fortinet is reviewing 12 products (12 cleared) and Cisco 31 products and services, and neither has confirmed a vulnerable product so far.

Help Net Security

Open source

PHP2Shell: PAN-OS and Panorama affected, Fortinet and Cisco still investigating

PAN-OS and Panorama affected in all versions; fixes pending
Fortinet reviewing 12 products including FortiSIEM and FortiSOAR; FortiOS not impacted
Cisco investigating 18 products and 13 cloud services, no workarounds available
Fortinet rates CVE-2026-109618 at 9.8 under CVSS v3

#PaloAltoNetworks#Fortinet#Cisco#PHP

Detecting PAN-OS CVE-2026-0321 with existing telemetry

Security

Qilin and INC ransomware exploit Palo Alto flaw to bypass MFA

Security

CVE-2026-0322 in PAN-OS: RCE in management interface, CVSS 8.6

Security

PHP2Shell: PAN-OS and Panorama affected, Fortinet and Cisco still investigating

Detecting PAN-OS CVE-2026-0321 with existing telemetry

Qilin and INC ransomware exploit Palo Alto flaw to bypass MFA

CVE-2026-0322 in PAN-OS: RCE in management interface, CVSS 8.6

Palo Alto Networks warns of exploited PAN-OS RCE flaw