PHP2Shell flaws prompt advisories from major network security vendors
Palo Alto Networks confirmed that all PAN-OS and Panorama versions are affected by two critical PHP vulnerabilities that could allow unauthenticated code execution, and fixed releases are not yet available. Fortinet and Cisco issued advisories while continuing to investigate which products may be exposed, with Fortinet clearing 12 products and reviewing 12, and Cisco reviewing 31 products and cloud services. Palo Alto said the greatest risk occurs when a management interface is reachable from the internet.
Palo Alto Networks says every PAN-OS and Panorama release carries the two PHP2Shell flaws, and patched PAN-OS builds are not yet available. The company identifies internet-facing management interfaces as the highest-risk configuration.
Fortinet has ruled out 12 offerings, including FortiOS, while 12 others remain under review. Cisco is examining 31 products and cloud services and has not confirmed any as vulnerable; its advisory lists no workarounds. FortiGuard issued virtual patches and general PHP server guidance.
Organizations running PAN-OS or Panorama, especially with internet-reachable management interfaces, could face elevated risk until fixes arrive. Fortinet and Cisco customers whose products remain under review may experience uncertainty and added operational work, including isolation and monitoring. Because neither vendor has confirmed an exposed product, the immediate societal impact may stay limited, though the advisories could prompt wider patching of internet-facing PHP systems.