exploitation-in-the-wild
2 live · 4 on record · last incident 15 days ago
Live2
- live9.8Palo Alto Firewalls PHP2Shell Attacks Target Palo Alto Firewalls
Patch now · Exploited · No patch yet · since 30 Oct 2026
Threat actors are actively exploiting critical PHP vulnerabilities known as PHP2Shell to target Palo Alto firewalls. Millions of instances remain potentially exposed following more than a week of active attacks.
Do:Apply available security patches or mitigation measures immediately.
- liveFragnesia Linux CISA warns of exploited Fragnesia Linux privilege escalation flaw
Patch now · Exploited · No patch yet · since 29 Oct 2026
CISA issued a warning regarding a high-severity Linux kernel privilege escalation vulnerability being actively chained in the wild with PHP2Shell flaws. Federal agencies have been instructed to apply patches.
Do:Patch the affected Linux kernel components as advised by CISA.
Earlier2
- closedDrupal Commerce Core CVE-2026-118539: Drupal Commerce Core authorization bypass exploited
Patch now · Exploited · since 30 Oct 2026 · CVE-2026-118539
- closed9.8Node2Shell CISA Warns of Active Exploitation of Critical Node2Shell Vulnerability
Patch now · Exploited · since 28 Oct 2026