Palo Alto Networks has confirmed that two critical PHP2Shell vulnerabilities affect its PAN-OS and Panorama platforms.

Tracked as CVE-2026-109618 and CVE-2026-109619, the flaws expose management interfaces to security risks, particularly when accessible from the public internet. The company has begun releasing fixes for certain versions and recommends restricting management access to trusted IP addresses.