[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fct6zinyIxakg-QwHZcB25VKZxD_nKZzT_YY0khd-HLI":3},{"article":4,"iocs":44,"watch_terms":52,"solutions":53,"lesson":35},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":33,"category":34,"article_tags":38},"6261d839-16c6-4813-80c6-0ad5a68261e1","CVE-2026-109618: PHP2Shell Hits All PAN-OS Versions","cve-2026-109618-php2shell-hits-all-pan-os-versions-aca0e8","CVE-2026-109618: PHP2Shell affects all PAN-OS and Panorama versions with no fix yet. Threat IDs, scope and workarounds explained.","Palo Alto Networks confirmed that PHP2Shell (CVE-2026-109618 and CVE-2026-109619), a pair of critical PHP memory-handling vulnerabilities rated 9.2 CVSS, affects all supported versions of PAN-OS 10.2–12.2 and all Panorama versions with no fixes yet available. The flaws are reachable only through the management web interface (HTTPS UI and XML API) and require no special configuration to exploit. Attackers have been probing production systems since before disclosure, though successful exploitation has not yet been confirmed.","CVE-2026-109618 PHP2Shell affects all PAN-OS and Panorama versions; no patch available yet.","https:\u002F\u002Fwww.cyberkendra.com\u002F2026\u002F10\u002Fcve-2026-109618-pan-os-panorama-php2shell.html","https:\u002F\u002Fwww.cyberkendra.com\u002Fwp-content\u002Fuploads\u002F2026\u002F10\u002FCve-2026-0322.webp","2026-10-23T01:47:17+00:00","2026-10-23T15:09:05.308595+00:00",9,[17,20,23,25,28,30],{"name":18,"type":19},"Palo Alto Networks","vendor",{"name":21,"type":22},"PAN-OS","product",{"name":24,"type":22},"Panorama",{"name":26,"type":27},"PHP","technology",{"name":29,"type":19},"Red Hat",{"name":31,"type":32},"PHP2Shell (exploit campaign)","threat_actor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":33,"icon":35,"name":36,"slug":37},null,"Vulnerabilities","vulnerabilities",[39],{"category":40},{"id":41,"icon":35,"name":42,"slug":43},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",[45,49],{"type":46,"value":47,"context":48},"cve","CVE-2026-109618","PHP2Shell memory-handling vulnerability affecting PAN-OS and Panorama management interface",{"type":46,"value":50,"context":51},"CVE-2026-109619","PHP2Shell use-after-free vulnerability in PHP worker globals",[18,29,21],{"controls":54,"vendors":142},[55,84,113],{"slug":56,"name":57,"problem":58,"products":59},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[60,68,76],{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":85,"name":86,"problem":87,"products":88},"patch-management","Automated patch management","Known holes get closed in days, not months.",[89,97,105],{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":114,"name":115,"problem":116,"products":117},"firewall","Next-generation firewall and intrusion prevention","Malicious traffic is blocked at the network edge and between zones.",[118,126,134],{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"clavister","Clavister","\u002Fvendor-logos\u002Fclavister.png","clavister-netwall","Clavister NetWall","https:\u002F\u002Fwww.clavister.com\u002Fproducts\u002Fclavister-netwall\u002F","Next-generation firewalls developed in Sweden.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-firewall","Sophos Firewall","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fnext-gen-firewall","Next-generation firewall with intrusion prevention.",{"vendor_slug":135,"vendor_name":136,"vendor_logo":137,"product_slug":138,"product_name":139,"url":140,"description":141},"sonicwall","SonicWall","\u002Fvendor-logos\u002Fsonicwall.png","sonicwall-firewalls","SonicWall firewalls","https:\u002F\u002Fwww.sonicwall.com\u002Fproducts\u002Ffirewalls","Next-generation firewalls for small business to enterprise.",[143],{"slug":144,"name":18,"logo_path":145,"roles":146},"palo-alto-networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png",[147],"affected"]