Palo Alto Networks confirmed on October 28, 2026, that attackers are exploiting the Palo Alto PHP2Shell flaws against PAN-OS management interfaces reachable from the internet. If a firewall sits in front of your website, its admin page may now be the weakest door into your business.
