PHP2Shell flaw hits Palo Alto, Fortinet, Cisco products

A critical pair of PHP vulnerabilities known as PHP2Shell has been confirmed to affect all versions of Palo Alto Networks’ PAN‑OS and Panorama, allowing unauthenticated attackers to execute code on the management web interface. Palo Alto has not yet released a patched version, while Fortinet and Cisco are still investigating their product lines for possible exposure.

The PHP2Shell flaw enables an attacker to send specially crafted requests to a vulnerable web server, bypassing authentication and running arbitrary commands. In Palo Alto’s case, the issue exists across every released PAN‑OS and Panorama build, meaning any organization that relies on these firewalls for remote management could be at risk. Fortinet has said it is reviewing twelve of its products, and Cisco is checking thirty‑one products and its cloud services, but neither has confirmed a specific vulnerable item.

Customers of the affected vendors should verify whether their devices run the vulnerable software and monitor official advisories for remediation updates. Until patches are available, the safest approach is to limit external access to management interfaces, enforce strong network segmentation, and require multi‑factor authentication for any privileged access. Using a reputable web application firewall can also block malicious payloads that attempt to exploit the flaw.

For everyday users, the incident underscores the importance of routine password security checks and monitoring for unusual activity on any online service. Free tools on ComputerScams.com, such as the Email Scam Checker, the Website Checker and the Password Breach Checker, can help you check suspicious messages, links and passwords.

Stay vigilant and apply any vendor‑issued updates as soon as they are released. A practical step you can take right now is to change administrative passwords on any network devices you control and enable multi‑factor authentication wherever possible.

Source: Read the original report