CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned about a high-severity Linux kernel privilege-escalation flaw that attackers are chaining with PHP2Shell vulnerabilities in the wild. CISA added CVE-2026-46300 to its Known Exploited Vulnerabilities (KEV) Catalog and added the PHP2Shell flaws to its list of actively exploited vulnerabilities.
CERT24