Hackers chain PHP2Shell and Fragnesia flaws to gain root on Palo Alto firewalls
CRITICAL · BREACHPalo Alto Networksredteam/daily · 1 source
- Severity
- Critical
- Sources
- 1
What happened
Attackers chained critical PHP2Shell remote code execution flaws with the Fragnesia Linux kernel flaw to gain root access on PAN-OS systems. The campaign reportedly compromised 24 internet-facing firewalls before reaching an internal firewall management server, bringing the total to 25 systems, according to Hunt.io's investigation citing Dream Research's analysis.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Read the full Hunt.io analysis to identify affected PAN-OS versions and mitigation guidance, as the excerpt does not provide them.
- Check whether internet-facing firewall management interfaces are exposed and restrict access where possible.
- Hunt for signs of compromise on PAN-OS devices and on any internal firewall management servers.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
GBHackers
Who and what is in it
Companies