Hackers chain PHP2Shell and Fragnesia flaws to gain root on Palo Alto firewalls
CRITICAL · BREACHPalo Alto Networksredteam/daily · 1 source
- Severity
- Critical
- Sources
- 1
What happened
Attackers chained critical PHP2Shell remote code execution vulnerabilities with the Fragnesia Linux kernel flaw to escalate to root on Palo Alto Networks PAN-OS firewalls. Reportedly 24 internet-facing devices were compromised, followed by an internal firewall management server, for 25 in total. The excerpt gives no CVE IDs or affected PAN-OS versions, so defenders should consult the full Hunt.io and Dream Research analysis for indicators and mitigations.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Read the full Hunt.io analysis to identify affected PAN-OS versions and mitigation guidance, as the excerpt does not provide them.
- Check whether internet-facing firewall management interfaces are exposed and restrict access where possible.
- Hunt for signs of compromise on PAN-OS devices and on any internal firewall management servers.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
GBHackers
Who and what is in it
Companies