Skip to content
PHP2Shell Vulnerabilities Impact Fortinet, Cisco, and Palo Alto Networks

PHP2Shell Vulnerabilities Impact Fortinet, Cisco, and Palo Alto Networks

First seen 22 Oct 2026, 10:42 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 22, 2026 at 12:14 UTC
  • •Palo Alto Networks confirms all PAN-OS versions are vulnerable to PHP2Shell.
  • •Fortinet is assessing 12 products for potential exposure to critical vulnerabilities.
  • •No patches or workarounds are currently available for affected systems.

Palo Alto Networks confirmed that all versions of PAN-OS and Panorama are affected by PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619, which allow remote code execution on web servers. Fortinet is reviewing 12 products for potential vulnerabilities, while Cisco is investigating 31 products and cloud services. No confirmed vulnerable products have been disclosed by Fortinet or Cisco yet. Palo Alto warns that the risk is heightened when PAN-OS management interfaces are exposed to the internet. Fortinet has rated CVE-2026-109618 as critical with a CVSS score of 9.8. As of now, no patches or workarounds are available for the affected products. Fortinet advises customers to isolate affected systems and review web application protection policies. The vulnerabilities were published on October 21, 2026, and the first public proof-of-concept was released on October 22, 2026.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-21
CVE-2026-109618 and CVE-2026-109619 published
Critical PHP vulnerabilities allowing remote code execution were disclosed, with CVSS scores of 9.2.
Helpnetsecurity
2026-10-22
First public PoC released
Proof-of-concept code for the PHP2Shell vulnerabilities was made publicly available, increasing the risk of exploitation.
Helpnetsecurity

More articles in this cluster (3)

Following this threat?

Track Cisco and CVE-2026-109618 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (15)

1 / 4

Common questions

Which products are affected by these vulnerabilities?
Palo Alto Networks' PAN-OS and Panorama are confirmed affected; Fortinet is reviewing 12 products, and Cisco is checking 31.
What is the current status of patches?
No patches or workarounds have been released for the affected products as of now.
How can I mitigate the risk while waiting for a patch?
Isolate affected systems from untrusted networks and review web application protection policies.