Active Exploitation of PHP2Shell Vulnerabilities Targets Palo Alto Networks Management Interfaces

Palo Alto Networks issued a security advisory warning that threat actors are actively exploiting recently patched PHP2Shell vulnerabilities against publicly accessible management interfaces. According to the advisory, active exploitation has been observed targeting the Palo Alto Networks management interface exposed to the internet. The vulnerabilities, which affect management-facing components, could allow unauthorized access if left unpatched. Palo Alto Networks has released patches addressing the flaws, and the company urges all administrators with internet-exposed management interfaces to apply the updates immediately to prevent compromise. The advisory does not specify the technical details of the exploitation methods, but confirms that active attacks are occurring in the wild.