PAN-OS PHP2Shell RCE (CVE-2026-109618/109619) and Internet access to management

Detects Palo Alto Networks PAN-OS PHP RCE threat hits (PHP2Shell / CVE-2026-109618 / CVE-2026-109619) or inbound HTTPS connections to the management interface from non-private external sources.