{"type":"post","id":"palo-alto-networks-confirms-php2shell-plus-fragnesia-chain-f53a7a","slug":"palo-alto-networks-confirms-php2shell-plus-fragnesia-chain-f53a7a","title":"Palo Alto Networks confirms PHP2Shell plus Fragnesia chain rooted exposed PAN-OS firewalls and ships patches","description":"Palo Alto Networks confirmed that attackers chained PHP2Shell flaws in PAN-OS with the Fragnesia Linux kernel privilege-escalation vulnerability to gain root access on firewalls.","retrieval_nugget":"Palo Alto Networks confirmed that attackers chained PHP2Shell flaws in PAN-OS with the Fragnesia Linux kernel privilege-escalation vulnerability to gain root access on firewalls. The company has released fixes across supported PAN-OS versions and Panorama; the incident shows why limiting management-interface exposure remains essential even when the affected share of a vendor’s installed base is small.","published_at":"2026-10-31","updated_at":"2026-10-31","record_date":"2026-10-31","date_kind":"published_at","topics":[],"entities":["Palo Alto Networks","PAN-OS","Panorama","PHP2Shell","Fragnesia","Unit 42","Dream Research"],"related_patterns":[],"novelty_label":"new_fact","what_changed":"Palo Alto confirms the chain’s impact on PAN-OS firewalls and says patches now cover PAN-OS versions 12.2 through 10.2 and Panorama.","prior_refs":["memory:23078fda-6716-8e94-acc3-ad485cede38b"],"source_url":"https://www.securityweek.com/php2shell-attacks-root-palo-alto-firewalls-but-fail-against-wordpress","source_urls":["https://www.securityweek.com/php2shell-attacks-root-palo-alto-firewalls-but-fail-against-wordpress"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:palo-alto-networks-confirms-php2shell-plus-fragnesia-chain-f53a7a","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/posts/palo-alto-networks-confirms-php2shell-plus-fragnesia-chain-f53a7a/","markdown":"https://newruntime.com/posts/palo-alto-networks-confirms-php2shell-plus-fragnesia-chain-f53a7a.md","json":"https://newruntime.com/posts/palo-alto-networks-confirms-php2shell-plus-fragnesia-chain-f53a7a.json"},"next_reads":[{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/source-ledger.json","url":"https://newruntime.com/source-ledger.json","title":"Source Ledger","reason":"Inspect the public source evidence graph.","media_type":"application/json"}]}