# Cisco, Palo Alto Networks, NTT rally after PHP2Shell crisis > Source: > Published: 2026-10-26 12:51:08+00:00 The fallout from the global PHP2Shell cybersecurity crisis continued, affecting infrastructure players such as Palo Alto Networks and Cisco, as well as virtualization and telecom services from Japanese giant NTT. Last week, researchers working with OpenAI and Google AI models discovered critical vulnerabilities in PHP, the server-side programming language that underpins much of the web. These flaws potentially opened up vulnerable servers to malicious code, possible granting attackers access to sensitive information as well as control over affected systems. While the critical flaws numbered only two in total, the impact radius amounted to an [enormous range of websites](https://www.wired.com/story/this-is-not-a-drill-2-php-vulnerabilities-are-setting-the-internet-on-fire/), applications, and enterprise products. Shortly after the discovery, Palo Alto Networks confirmed the vulnerabilities affected multiple versions of its PAN-OS software, including PA-Series and VM-Series firewalls and Panorama management systems. Specifically, the HTTPS management interface and XML API were at risk, with Palo Alto rating the impact on its products as high severity. Patches were released last week for its Cortex XCore SaaS (Software as a Service) and WildFire Cloud services. On Sunday (October 25), Palo Alto began releasing PAN-OS hotfixes, with the remaining releases [scheduled through October 30](https://security.paloaltonetworks.com/CVE-2026-109618). Cisco, meanwhile, confirmed that while some of its product families were affected (Ultra-Reliable Wireless Backhaul, Expressway Series, Expressway Select Series, and Duo Access Gateway), most of its major networking and security products were not vulnerable. Several other products, including some SD-WAN and mobile-core components, remained under investigation. The firm released a fix for Duo Access Gateway, but patches for the other affected products remain outstanding. ## NTT and PHP2Shell Over in Japan, [telecom giant NTT DoCoMo temporarily suspended](https://www.ntt.com/about-us/information/emginfo_20261023_003.html) several of its public emergency-warning services as a precaution against the PHP2Shell flaws. The shutdown affected Japan's J-Alert national warning system, river flood forecasts, and municipal disaster and evacuation notifications. However, earthquake early warnings and tsunami alerts remained operational throughout the 48 hour-period. DoCoMo confirmed that all affected services were [restored on Sunday (25 October).](https://www.ntt.com/about-us/information/emginfo_20261025_001.html) Another part of the NTT group, [NTTPC Communications](https://help.arena.ne.jp/hc/ja/articles/44461808152215--2026-10-23-WebARENA-IndigoPro-Indigo-Wasabi-%E9%87%8D%E8%A6%81-PHP%E3%81%AE%E8%84%86%E5%BC%B1%E6%80%A7%E3%81%AB%E4%BC%B4%E3%81%86%E5%90%84%E7%AE%A1%E7%90%86%E7%94%BB%E9%9D%A2%E3%81%AE%E5%81%9C%E6%AD%A2%E3%81%AB%E3%81%A4%E3%81%84%E3%81%A6-2026-10-26%E6%9B%B4%E6%96%B0), suspended management interfaces across its various cloud services. The precautionary shutdown disabled customer administration portals, virtual machine (VM) control panels, and customer-facing API. While this prevented users from managing VM instances, existing virtual machines continued running. According to the cloud and IT provider, which is a division of NTT DoCoMo Business, affected interfaces are not expected to return until early November. Prior to these incidents, NTT Corporation Chief Cybersecurity Strategist Mihoko Matsubara told this title the PHP discovery exemplified how security teams worldwide are now dealing with a daily stream of newly discovered vulnerabilities and patches due to AI-driven findings. “Even before frontier AI, cyber defenders, especially in critical infrastructure companies, had difficulty keeping up with patches, because we have to make sure there's no downtime so we can keep providing crucial services to everybody,” Matsubara said. On whether PHP2Shell would likely be remembered as 2026’s biggest security drama, the executive said: “I wouldn’t bet money on this because thanks to AI, we may see more to come."