Suspected Chinese state actor used a custom PHP2Shell exploit chain targeting nine PAN-OS versions to root 25 government and private servers across four countries in under 15 https://deafnews.it/en/article/php2shell-custom-pan-os-exploit-roots-25-servers-in-under-15-minutes
DeafNewsPHP2Shell: Custom PAN-OS Exploit Roots 25 Servers in Under 15 Minutes | DeafNewsA suspected Chinese state actor deployed a custom, non-public PHP2Shell exploit chain targeting nine PAN-OS versions, chaining CVE-2026-109618/109619 with CVE-2026-46300 to achieve root on 25 government and private servers across four countries in under 15 minutes.