PHP2Shell (CVE-2026-109618): Why Your Firewall Vendor Is Talking About a PHP Bug
PHP2Shell is a pair of PHP bugs allowing code execution without login. Palo Alto says all PAN-OS versions are affected. What each vendor said and what to do.
- Home
- Blog
Tech Blog
Field notes from real incidents: what broke, how we found it, and the fix. No fluff.
Ransomware Gangs Are Using GlobalProtect CVE-2026-0257: What to Check
Unit 42 says Qilin and Inc ransomware are exploiting GlobalProtect auth bypass CVE-2026-0257 to get VPN access. The fix, the config change and what to hunt for.
PAN-OS October 2026: CVE-2026-0322 Management RCE and a GlobalProtect Identity Bug
Palo Alto's October advisories: CVE-2026-0322 gives root on the firewall via the management interface and is already attacked, plus GlobalProtect CVE-2026-0319.