CERT24PHP2Shell attacks root Palo Alto firewalls but fail against WordPressLoading data…
CERT24Threat Observatory
Period

PHP2Shell attacks root Palo Alto firewalls but fail against WordPress

Attackers have been probing and exploiting servers vulnerable to PHP2Shell for more than a week. Palo Alto Networks confirmed that a China-linked group chained the PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619 with the Fragnesia Linux kernel privilege-escalation bug to obtain root access on PAN-OS firewalls. As of October 28, no WordPress site compromise through PHP2Shell exploitation was known.

← Back to intelligence

PHP2Shell attacks root Palo Alto firewalls but fail against WordPress

Attackers have been probing and exploiting servers vulnerable to PHP2Shell for more than a week. Palo Alto Networks confirmed that a China-linked group chained the PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619 with the Fragnesia Linux kernel privilege-escalation bug to obtain root access on PAN-OS firewalls. As of October 28, no WordPress site compromise through PHP2Shell exploitation was known.