Back to Security News
Security News Nov 3, 2026 Cyber Security Agency of Singapore

Active Exploitation of PHP2Shell Vulnerabilities Affecting Network and Security Products

Active exploitation of PHP2Shell has been reported against Palo Alto Networks firewalls running affected PAN-OS versions. Attackers have also reportedly chained these vulnerabilities with a separate Linux kernel flaw to...

The Cyber Security Agency of Singapore published an alert that may be relevant to administrators and security teams.

What to review

This alert appears to focus on Active exploitation of PHP2Shell has been reported against Palo Alto Networks firewalls running affected PAN-OS versions. Attackers have. Teams should identify whether related software, appliances, or services exist in their environment and whether they are exposed to untrusted networks.

Recommended action

Review the advisory, confirm affected versions, apply available updates, and use temporary mitigations only where patching cannot be completed immediately.

Credits

This brief is based on information from Cyber Security Agency of Singapore . Please refer to the original source for the complete advisory and vendor-specific guidance.

Related Posts

Security News

Multiple Vulnerabilities in Oracle Application Object Library

About CSAInformation forAlerts & AdvisoriesNews & EventsLegislationOur ProgrammesResourcesHomeAlerts & AdvisoriesAlertsMultiple Vulnerabilities in Oracle Application Object LibraryAlertsMultiple Vulnerabilities in Oracle...

Cyber Security Agency of Singapore Read
Security News
Medium Severity

CVE-2026-120597 medium vulnerability summary

A vulnerability was identified in Welcart e-Commerce Plugin up to 2.12.6 on WordPress. This affects the function ESCOTT_MAIN::error_page_message of the file classes/paymentESCOTT.main.class.php. Such manipulation of the...

Tenable Newest CVEs Read
Security News
High Severity

CVE-2026-120752 high vulnerability summary

PyMuPDF 1.25.3 before 2.0 contains a stack-based buffer overflow vulnerability in JM_set_annot_callout_line() that copies a caller-supplied number of callout points into a fixed three-element stack array. Attackers who c...

Tenable Newest CVEs Read