Dream Security

Stories

PHP vulnerabilities exploited as websites worldwide go offline

Reported that attackers rooted 24 PAN-OS firewalls and an internal firewall-management server, three in a US government-affiliated network

Palo Alto Networks confirmed that attackers chained the PHP2Shell flaws with a Linux kernel bug to take root control of its firewalls, and shipped hotfixes for PAN-OS 12.2, 12.1, 11.2, 11.1 and 10.2. Unit 42, the company's threat research arm, said it independently verified the tooling and results that Dream Security described.

Updated 5 days ago

Pre-auth bug in 32-year-old GNU telnetd enables remote code execution on unpatched systems

New Capabilities

As of September 2026: Disclosed the vulnerability

In March 2026, researchers found a buffer overflow in GNU telnetd that had hidden in the codebase for roughly 32 years. The flaw, tracked as CVE-2026-32746, lets a remote attacker corrupt server memory before the login prompt ever appears. Because most Linux distributions and countless embedded devices base their telnet daemons on GNU inetutils, the vulnerable code ships almost everywhere.

Updated Sep 17