* [Blog](https://origin-researchcenter.paloaltonetworks.com/blog) * [Network Security](https://origin-researchcenter.paloaltonetworks.com/blog/network-security/) * [Advanced Threat Prevention Plus](https://origin-researchcenter.paloaltonetworks.com/blog/network-security/category/advanced-threat-prevention-plus/) * Critical PHP Vulnerabilit... # Critical PHP Vulnerabilities: Frontier Virtual Patching Customers Were Protected Before Day One [](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Forigin-researchcenter.paloaltonetworks.com%2Fblog%2Fnetwork-security%2Fcritical-php-vulnerabilities-frontier-virtual-patching-customers-were-protected-before-day-one%2F) [](https://twitter.com/share?text=Critical+PHP+Vulnerabilities%3A+Frontier+Virtual+Patching+Customers+Were+Protected+Before+Day+One&url=https%3A%2F%2Forigin-researchcenter.paloaltonetworks.com%2Fblog%2Fnetwork-security%2Fcritical-php-vulnerabilities-frontier-virtual-patching-customers-were-protected-before-day-one%2F) [](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Forigin-researchcenter.paloaltonetworks.com%2Fblog%2Fnetwork-security%2Fcritical-php-vulnerabilities-frontier-virtual-patching-customers-were-protected-before-day-one%2F&title=Critical+PHP+Vulnerabilities%3A+Frontier+Virtual+Patching+Customers+Were+Protected+Before+Day+One&summary=&source=) [](https://www.paloaltonetworks.com//www.reddit.com/submit?url=https://origin-researchcenter.paloaltonetworks.com/blog/network-security/critical-php-vulnerabilities-frontier-virtual-patching-customers-were-protected-before-day-one/&ts=markdown) \[\](mailto:?subject=Critical PHP Vulnerabilities: Frontier Virtual Patching Customers Were Protected Before Day One) Link copied By [Anand Oswal](https://www.paloaltonetworks.com/blog/author/anand-oswal/?ts=markdown "Posts by Anand Oswal") Oct 21, 2026 7 minutes [Advanced Threat Prevention Plus](https://www.paloaltonetworks.com/blog/network-security/category/advanced-threat-prevention-plus/?ts=markdown) [Cloud Delivered Security Services](https://www.paloaltonetworks.com/blog/network-security/category/cloud-delivered-security-services/?ts=markdown) [Cloud NGFW](https://www.paloaltonetworks.com/blog/network-security/category/cloud-ngfw/?ts=markdown) [Frontier Virtual Patching](https://www.paloaltonetworks.com/blog/network-security/category/frontier-virtual-patching/?ts=markdown) [Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown) [Strata Network Security Platform](https://www.paloaltonetworks.com/blog/network-security/category/strata-network-security-platform/?ts=markdown) Today, the PHP project disclosed two critical remote code execution vulnerabilities, [CVE-2026-109618 and CVE-2026-109619](https://unit42.paloaltonetworks.com/cve-2026-109618-cve-2026-109619/), in the scripting language behind a large share of the world's web servers and content management systems. Both are rated 9.2 under [Common Vulnerability Scoring System](https://www.first.org/cvss/) (CVSS 4.0). Both can be exploited by an unauthenticated attacker. For most organizations, the question isn't whether they run PHP. It's where they run it, and how much of it they can patch before attackers arrive. That is the [frontier AI exposure gap](https://www.paloaltonetworks.com/blog/2026/10/millions-of-php-instances-exposed-what-organizations-need-to-do-right-now/), playing out in real time. Customers running[Frontier Virtual Patching](https://www.paloaltonetworks.com/blog/network-security/harnessing-ai-for-prevention-introducing-frontier-virtual-patching/) on Palo Alto Networks^®^ Advanced Threat Prevention Plus didn't have to wait for it to close. They've been protected since October 20, before the vulnerability details were public. Don't wait for manual patches to expose your web footprint. [Get immediate pre-disclosure protection with Frontier Virtual Patching and talk to an expert.](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention#contact-us) ### **Why this one matters** Four details make this a top-priority event for every security team: * **No credentials required.** According to the [PHP security advisory](https://www.php.net/archive/2026.php#2026-10-21-5), every PHP installation serving web requests is at risk. Risk is highest for mod\_php, where an unauthenticated request can trigger the attack before any application code runs. * **Massive exposure.** Cortex Xpanse has identified more than 22 million exposed instances potentially vulnerable to these flaws. * **Exploit code already exists.** Unit 42 has seen proof-of-concept exploits, and many European governments have taken their websites offline as a precaution. * **No safe workaround.** The PHP security team is clear that interim configuration changes reduce exposure but do not make a server safe. Updating is the only complete fix. ### **The exposure gap has moved to your side of the ledger** When we introduced [Frontier Virtual Patching](https://www.paloaltonetworks.com/blog/network-security/harnessing-ai-for-prevention-introducing-frontier-virtual-patching/) with PAN-OS 12.2, we described total exposure of 145+ days as the sum of two delays: the time it takes a vendor to release a patch (30-90 days), and the time it takes a customer to deploy it (~ 55 days). In this case, the PHP security team did exactly what good maintainers should. They gave advance notice, coordinated with Linux distributions, and released fixed versions (8.5.12, 8.4.27, 8.3.36 and 8.2.35) on the day of disclosure. Vendor time-to-release patch was effectively zero. That leaves the second half of the equation, and it is the harder one. The average enterprise takes [55 days](https://www.edgescan.com/stats-report/) to remediate an application vulnerability. Meanwhile, [29% of vulnerabilities](https://wwv.vulncheck.com/hubfs/Research/2026-VulnCheck-Exploit-Intelligence-Report.pdf) are now weaponized within 24 hours of disclosure. And PHP is rarely a single server you can update on schedule. It runs inside content management systems, container images, internal tools and third-party appliances whose software you don't control. PHP 8.1 and older no longer receive fixes from the PHP project at all. You can't patch what you can't find, and no organization will find and patch every PHP instance this week. Patching faster is necessary. But, it is no longer sufficient for the vulnerability deluge we are seeing in the frontier AI era. This is exactly the scenario Frontier Virtual Patching was built for. ### **Protection even before disclosure** Customers running Advanced Threat Prevention Plus with Frontier Virtual Patching have been protected against CVE-2026-109618 and CVE-2026-109619 since October 20, before the vulnerability details were made public, through Threat Prevention signature [543004](https://threatvault.paloaltonetworks.com/?query=543004). No downtime. No software restarts. No manual policy changes. After publication of the vulnerability and patches, Advanced Threat Prevention has also released standard IPS coverage (via signatures 543004, 97622, 97623, 97624, 97625) on Oct 21st. After the regular content release for ATP, signature 543004 will be in both Frontier Virtual Patching and ATP content for a 7-day grace period, after which it will be retired from Frontier Virtual Patching preemptive coverage. Because that protection runs at the network layer, it shields every PHP workload whose traffic passes through the firewall, including the ones that aren't in your inventory yet. It extends across PA-Series, VM-Series and soon Prisma Access, so the same protection applies in the data center, the cloud and containerized environments. Here are the details of the pre-emptive coverage shown in Strata Cloud Manager. This is what preemptive defense looks like in practice. Frontier Virtual Patching combines proactive vulnerability discovery from [NOVA](https://unit42.paloaltonetworks.com/frontier-ai-vulnerability-burst/), our frontier AI vulnerability analyzer (has scanned 6000+ OSS repositories in 3 months and found 17000+ vulnerabilities of which 99% are novel and 40% are critical), with early disclosures from partners in our [Critical Defense Program](https://www.paloaltonetworks.com/company/press/2026/palo-alto-networks-introduces-frontier-ai-critical-defense-program) and more than 20 traditional intelligence sources. Vaulted protection lets us deliver pre-emptive virtual patching before a vulnerability is public, without revealing the details an attacker would need to build an exploit. ### **Actions for network security leaders today** For network security leaders, addressing the PHP vulnerabilities starts with these practical actions. * **First, shield every PHP workload now.** To mitigate and ensure attack protections, confirm that your security policies apply [Advanced Threat Prevention Plus](https://www.paloaltonetworks.com/resources/datasheets/advanced-threat-prevention) to traffic headed to both internet-facing and internal PHP servers, and that the signature is set to block. For HTTPS applications, make sure inbound traffic is decrypted so the firewall can see the exploit attempt. * **Second, assess your inventory - find every PHP instance, including the ones you don't know about.** Enable the PHP Attack Surface Rule in Cortex Xpanse to surface internet-exposed PHP. Use Cortex Cloud Posture or Prisma Cloud Compute to find vulnerable PHP versions in code and cloud workloads. * **Third, patch in priority order based on reachability.** Prioritize patching public-facing and high-risk servers first by updating to supported, secure software versions or applying distribution patches. If immediate updates aren't possible, request vendor timelines, migrate off legacy systems, and apply interim hardening measures to mitigate risk. * **Fourth, assume someone may have gotten there first.** Deploy real time security operations; use Cortex XDR or Cortex XSIAM to hunt for post-exploitation activity on PHP hosts. If you suspect a compromise, engage the [Unit 42 Incident Response team](https://start.paloaltonetworks.com/contact-unit42.html). * **Fifth, make preemptive protection the default.** This won't be the last critical vulnerability in software that runs everywhere. Treat virtual patching as a standing layer of your architecture, not an emergency measure. These actions help security leaders move from reacting to each disclosure to staying ahead of it. Patching remains the ultimate cure. But the organizations that come through events like this one unscathed won't simply be the ones that patch fastest. They'll be the ones that were protected with Frontier Virtual Patching before they had to. ### **Take the next step** * Get started with a 30-day Frontier Virtual Patching [trial.](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention#contact-us) * Read the [Unit 42 Threat Brief](https://unit42.paloaltonetworks.com/cve-2026-109618-cve-2026-109619/) on CVE-2026-109618 and CVE-2026-109619. * Review the [PHP security advisory](https://www.php.net/archive/2026.php#2026-10-21-5) and update guidance. * Learn how [Frontier Virtual Patching](https://www.paloaltonetworks.com/blog/network-security/harnessing-ai-for-prevention-introducing-frontier-virtual-patching/) works and [watch the deep dive](https://www.paloaltonetworks.com/intersect?webinar=eliminate-frontier-ai-exposure). * Under attack? [Contact Unit 42](https://start.paloaltonetworks.com/contact-unit42.html). ### Mitigating Critical PHP Vulnerabilities (CVSS 9.2) at Machine Speed When frontier AI models accelerate both vulnerability discovery and reverse-engineering of patches, traditional remediation creates an unavoidable window of exposure. Get started with Frontier Virtual Patching in Advanced Threat Prevention Plus to solve this structural delay. [Get Started](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention#contact-us) *** ** * ** *** ## Related Blogs ### [AI Application Security](https://www.paloaltonetworks.com/blog/network-security/category/ai-application-security/?ts=markdown), [Cloud NGFW](https://www.paloaltonetworks.com/blog/network-security/category/cloud-ngfw/?ts=markdown), [Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown), [Strata Network Security Platform](https://www.paloaltonetworks.com/blog/network-security/category/strata-network-security-platform/?ts=markdown), [Zero Trust Security](https://www.paloaltonetworks.com/blog/network-security/category/zero-trust-security/?ts=markdown) [#### Less Noise, More Action: Unified Incident Management in Strata Cloud Manager](https://origin-researchcenter.paloaltonetworks.com/blog/network-security/less-noise-more-action-unified-incident-management-in-strata-cloud-manager/) ### [AI Security](https://www.paloaltonetworks.com/blog/category/ai-security/?ts=markdown), [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Cloud Delivered Security Services](https://www.paloaltonetworks.com/blog/network-security/category/cloud-delivered-security-services/?ts=markdown), [Critical Infrastructure](https://www.paloaltonetworks.com/blog/network-security/category/critical-infrastructure/?ts=markdown), [Cybersecurity](https://www.paloaltonetworks.com/blog/category/cybersecurity/?ts=markdown), [Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown), [Strata Network Security Platform](https://www.paloaltonetworks.com/blog/network-security/category/strata-network-security-platform/?ts=markdown), [Zero Trust Security](https://www.paloaltonetworks.com/blog/network-security/category/zero-trust-security/?ts=markdown) [#### Expanding our 5th-Gen Hardware Firewalls Built for AI Scale and Quantum Resilience](https://origin-researchcenter.paloaltonetworks.com/blog/network-security/expanding-our-5th-gen-hardware-firewalls-built-for-ai-scale-and-quantum-resilience/) ### [Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown), [Strata Network Security Platform](https://www.paloaltonetworks.com/blog/network-security/category/strata-network-security-platform/?ts=markdown), [Zero Trust Security](https://www.paloaltonetworks.com/blog/network-security/category/zero-trust-security/?ts=markdown) [#### One View. Faster Action: Introducing Command Center 2.0](https://origin-researchcenter.paloaltonetworks.com/blog/network-security/one-view-faster-action-introducing-command-center-2-0/) ### [Cloud Delivered Security Services](https://www.paloaltonetworks.com/blog/network-security/category/cloud-delivered-security-services/?ts=markdown), [Cloud NGFW](https://www.paloaltonetworks.com/blog/network-security/category/cloud-ngfw/?ts=markdown), [Uncategorized](https://www.paloaltonetworks.com/blog/category/uncategorized/?ts=markdown) [#### Palo Alto Networks Collaborates with Google Cloud to Redefine Protection Against AI-Generated Malware](https://origin-researchcenter.paloaltonetworks.com/blog/network-security/palo-alto-networks-google-cloud-ai-malware-protection/) ### [AI Security](https://www.paloaltonetworks.com/blog/category/ai-security/?ts=markdown), [Cybersecurity](https://www.paloaltonetworks.com/blog/category/cybersecurity/?ts=markdown), [Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown), [Strata Network Security Platform](https://www.paloaltonetworks.com/blog/network-security/category/strata-network-security-platform/?ts=markdown), [Threat Intelligence](https://www.paloaltonetworks.com/blog/category/threat-intelligence-1/?ts=markdown) [#### Why Integrated Threat Defense and Autonomous Remediation Are the Only Strategy for the AI Era](https://origin-researchcenter.paloaltonetworks.com/blog/network-security/integrated-defense-threat-insights/) ### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Cloud NGFW](https://www.paloaltonetworks.com/blog/network-security/category/cloud-ngfw/?ts=markdown), [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown), [Strata Network Security Platform](https://www.paloaltonetworks.com/blog/network-security/category/strata-network-security-platform/?ts=markdown) [#### What Is a Hybrid Mesh Firewall and Why It Matters](https://origin-researchcenter.paloaltonetworks.com/blog/2025/08/hybrid-mesh-firewall-and-why-it-matters/) ### Subscribe to Network Security Blogs! Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more. ![spinner](https://origin-researchcenter.paloaltonetworks.com/blog/wp-content/themes/panwblog2023/dist/images/ajax-loader.gif) Sign up Please enter a valid email. By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) and acknowledge our [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown). Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder. This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply. {#footer} {#footer} Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/ai-security?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/ot-security-solution?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * Observability * [Cortex XCOR](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) * [Next-Generation Identity Security](https://www.paloaltonetworks.com/idira?ts=markdown) * [Privileged Access Management](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Prepare for Emerging Risks](https://www.paloaltonetworks.com/unit42/prepare-for-emerging-risks/continuous-frontier-ai-defense?ts=markdown) * [Strengthen Your Defenses](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses?ts=markdown) * [Build Your Security Strategy](https://www.paloaltonetworks.com/unit42/build-your-security-strategy?ts=markdown) * [Understand the Adversary](https://www.paloaltonetworks.com/unit42/threat-intelligence?ts=markdown) * [Respond to a Cyber Attack](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/certifications?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![Palo Alto Networks Logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language