Chained PHP2Shell Exploit Roots 25 Servers, including US Government Servers

North America Tech Sat, 31 Oct 2026 10:42:00 GMT Moderate confidence — 64/100

The attacker combined PHP2Shell with a kernel privilege-escalation exploit to compromise exposed systems.
The affected devices run specific versions of a large vendor’s firewall software.
For security purposes, we are not disclosing the vendor or the affected versions, and the vendor has been notified.

Unverified

The attacker combined PHP2Shell with a kernel privilege-escalation exploit to compromise exposed systems.
The affected devices run specific versions of a large vendor’s firewall software.
For security purposes, we are not disclosing the vendor or the affected versions, and the vendor has been notified.

Sources: Dreamgroup