🔍 Read the full analysis: PHP2Shell And AI Assistance: How Attackers Took Over Palo Alto Servers on ThorstenMeyerAI.com
Get hardware and tech essentials delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Dream says an attacker used PHP2Shell flaws and a previously disclosed Linux kernel bug to gain root access on 24 internet-exposed Palo Alto Networks firewalls. The operation also reached an internal firewall-management server at a U.S. government-affiliated organization. AI tools were present in the attacker’s environment, but Dream says it has no direct evidence they wrote the exploits or scripts.
Attackers gained root access to 24 Palo Alto Networks firewalls by chaining two PHP vulnerabilities, known as PHP2Shell, with a previously disclosed Linux kernel flaw, according to Israeli security company Dream. Dream said the operation also reached an internal server at a U.S. government-affiliated organization; Palo Alto Networks said its Unit 42 researchers independently verified the attacker’s tools and results.
Dream’s account says the attacker ran an automated operation against 240 selected firewalls on the evening of October 23 and obtained root access on 24. The targets were in the United States, Japan, Taiwan and South Korea. Dream reported that 22 compromised firewalls were left with hidden web shells, while two were associated with the government-affiliated organization. The attacker then used access through that organization’s firewall environment to compromise an internal firewall-management server, bringing the reported total to 25 servers.
The reported chain combined PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619 with Fragnesia, a Linux kernel privilege-escalation flaw tracked as CVE-2026-46300. Dream said PHP2Shell provided a way to run commands under a low-privilege account on the firewall, while Fragnesia was used to elevate privileges to root. Dream estimated that the chain, including installation of a persistent back door, took less than 15 minutes.
According to Dream, the attacker later used a tunnel through a compromised firewall to reach the organization’s internal management server and then targeted Active Directory, the system used to manage identities and access. The source account does not specify whether the attacker successfully changed directory data or obtained particular credentials. Dream said it found AI-related tools on the attacker’s servers, including Claude Code and the DeepSeek and Kimi models configured in an offensive-security platform called aiscan. It did not establish that those tools created the exploit chain.
Infographic 01 · PHP2Shell on Palo Alto firewalls
Two days from patch to root.
PHP fixed the bug on 21 October. Fixed firewall software for the attacked branches arrived almost a week later. The attack ran in between.
- 13–23 MayFragnesia goes public, kernel fix followsLinux privilege-escalation bug with a public exploit; CVE-2026-46300.
- 8 OctAttacker sets up an AI platformaiscan configured with DeepSeek and Kimi, per Dream’s timeline.
- 21 OctPHP fixes PHP2ShellPHP 8.5.12, 8.4.27, 8.3.36, 8.2.35. Palo Alto advisory the same day; PAN-OS fixes “upcoming”.
- 23 Oct, evening UTCBatch run: 240 targets, 24 rootedFound via device search engine, filtered to US, Japan, Taiwan, South Korea.
- 24 OctInto a government-affiliated networkTunnel, persistence, internal management server rooted (no. 25), Active Directory attacked.
- 26 OctDream publishes · CISA lists PHP2ShellFederal deadline 29 Oct.
- 27–29 OctFixed PAN-OS builds for 12.2 and 12.1CISA lists Fragnesia on 28 Oct; Unit 42 confirms Dream’s results on 29 Oct.
The fix for PHP existed. The fix for the firewall did not, yet. The open management page was the only door that mattered.Thorsten Meyer · my reading
Sources: Dream Research, 26 Oct 2026 (updated 29 Oct); php.net, 21 Oct 2026; Palo Alto Networks advisory (updated 29 Oct 2026); CISA KEV catalog, version 29 Oct 2026; oss-security, 13 May 2026; Unit 42, 29 Oct 2026. Day count: Thorsten Meyer.
Powered by Thorsten Meyer AI
Exposed Management Interfaces Enabled Access
The incident shows how an internet-accessible firewall management interface can turn software vulnerabilities into a route toward an organization’s internal systems. A firewall’s management page controls security settings; access to it can carry greater risk than access to an ordinary public-facing service. In this case, Dream says the attacker moved from vulnerable firewalls to a server used to manage the organization’s firewalls, then targeted Active Directory.
The timing also matters. PHP released fixes on October 21, and Palo Alto Networks issued an advisory that day, but Dream said patched PAN-OS builds for the affected 12.1 and 12.2 branches arrived between October 27 and 29. That left a period in which organizations needed to rely on mitigation rather than an available fixed build. The report’s central security lesson is not that AI independently carried out the intrusion: it is that exposed management access and a known privilege-escalation flaw could be combined quickly.
Products Worth Considering
LG UltraGear 32GX870A-B 32-inch 4K OLED Gaming Monitor
LG 34GX90SA-W 34-inch Ultragear WQHD OLED Curved Gaming Monitor
Trezor Safe 5 Crypto Hardware Wallet with Color Touchscreen, Black Graphite
As an affiliate, we earn on qualifying purchases.
Patches Followed the Attack
Dream said it identified about 19,000 PAN-OS firewalls with internet-facing management pages using FOFA, an internet-connected-device search engine. A custom scanner obtained version information from about 5,000; filtering those results by location and software version produced the 240 systems targeted in the reported batch. These figures describe Dream’s scanning and selection process, not the total number of vulnerable or compromised firewalls worldwide.
The Fragnesia kernel flaw had been disclosed in May 2026, according to Dream’s timeline, and a public exploit was available. On October 21, PHP released updated versions and Palo Alto Networks published a security advisory, with fixed PAN-OS builds still forthcoming. CISA added both PHP2Shell vulnerabilities to its Known Exploited Vulnerabilities catalog on October 26 and set a three-day deadline for federal agencies, according to the source material. Dream published its findings that day and updated its account on October 29.
Dream’s account says the attack targeted PAN-OS systems running Palo Alto Networks’ bundled PHP version, identified as 8.0.30. It describes the vulnerable management pages as reachable from the public internet. Palo Alto Networks’ specific guidance, as summarized in the source, was to keep the management interface off the internet while fixed software was not yet available.
““no direct evidence” that AI tools wrote the exploit or scripts”
— Dream
AI’s Role Remains Unproven
The presence of Claude Code, DeepSeek and Kimi-related tools on attacker infrastructure does not establish how they were used. Dream explicitly said it had no direct evidence that AI wrote the exploits or scripts, and its assessment was that the operation did not appear fully autonomous. The available account also does not establish whether AI helped with target selection, debugging, scanning or other tasks.
Other details remain incomplete. The source material does not identify the government-affiliated organization, state whether Active Directory was successfully compromised, or describe what data—if any—was accessed or taken. It also does not provide a complete account of the impact on each of the 24 firewalls. Palo Alto’s reported verification of tools and results does not, on its own, resolve these unanswered questions.
Patch and Restrict Management Access
Organizations using affected PAN-OS branches should check Palo Alto Networks’ current security advisory for applicable fixed versions and install updates according to the vendor’s guidance. While systems remain unpatched, the source material says the recommended protection was to remove management pages from public internet access. Security teams should also review firewall logs and configurations for unexpected web shells, tunnels or changes, and investigate whether systems used to manage firewalls were reached.
Federal agencies faced a three-day remediation deadline after CISA added the PHP2Shell flaws to its exploited-vulnerabilities catalog, according to the report. Further updates may clarify the affected organization’s response, whether Active Directory was compromised, and how the attacker used the AI tools found by Dream. Those points remain unconfirmed in the available account.
Key Questions
What is PHP2Shell?
PHP2Shell is the name used for two PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, which Dream says were used to run commands on vulnerable PAN-OS management systems.
How many servers were compromised?
Dream reported root access on 24 firewalls, plus access to one internal firewall-management server at a government-affiliated organization: 25 servers in total.
Did AI create the attack?
That has not been established. Dream found AI tools and model configurations on the attacker’s servers but said it had no direct evidence they wrote the exploits or scripts.
What should organizations do?
Check Palo Alto Networks’ advisory for the relevant fixed PAN-OS release, apply the vendor’s guidance, and keep management interfaces off the public internet. Teams should also review systems and logs for signs of access or persistence.
Source: ThorstenMeyerAI.com
