CYBERSECURITYTRACKER
Permanent story citation

What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11025

As cited

Copy frozen at (site build).

vulnerabilities

What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers

Palo Alto Networks confirmed that all PAN-OS and Panorama versions are vulnerable to PHP2Shell, a pair of critical PHP flaws enabling unauthenticated remote code execution (RCE) on web servers; the company has not released fixes yet. Fortinet and Cisco each launched investigations into their product lines for exposure, with neither confirming vulnerable products to date.

Why it matters: Palo Alto customers running any version of PAN-OS or Panorama face immediate RCE risk with no patches available; Fortinet and Cisco customers should monitor their respective advisories as assessments continue.

VendorsCiscoFortinetPalo Alto Networks
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

What the PHP2Shell vulnerability means for Fortinet, Cisco and Palo Alto customers

Palo Alto Networks confirmed that all PAN-OS and Panorama versions are vulnerable to PHP2Shell, a pair of critical PHP flaws enabling unauthenticated remote code execution (RCE) on web servers; the company has not released fixes yet. Fortinet and Cisco each launched investigations into their product lines for exposure, with neither confirming vulnerable products to date.

Why it matters: Palo Alto customers running any version of PAN-OS or Panorama face immediate RCE risk with no patches available; Fortinet and Cisco customers should monitor their respective advisories as assessments continue.

VendorsCiscoFortinetPalo Alto Networks
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary