Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces

Palo Alto Networks has issued a warning that threat actors are actively exploiting PHP2Shell vulnerabilities in publicly-accessible management interfaces. The exploitation targets internet-exposed management interfaces of Palo Alto Networks devices. The company released an advisory update confirming active exploitation is underway. The vulnerabilities were recently patched, but unpatched or internet-exposed systems remain at risk. Organizations are urged to restrict access to management interfaces and apply available patches immediately. This represents a high-severity, actively exploited vulnerability in widely deployed network security infrastructure.