PHP2Shell Plus Fragnesia: A Dangerous New Route From Web Server to Root

PHP2Shell plus Fragnesia: A dangerous new route from web server to root

The PHP2Shell saga continues, with attackers discovering new ways to exploit the critical vulnerability impacting millions of organizations worldwide. The US Cybersecurity and Infrastructure Security Agency (CISA) has warned of a high severity Linux kernel privilege escalation flaw that attackers are chaining with PHP2Shell bugs in the wild. Identified as CVE-2026-46300, it could allow attackers to run malicious code with root permissions, givin…

PHP2Shell chain used to root 25 servers

Researchers say suspected Chinese operators built a custom PHP2Shell exploit and chained it with the Fragnesia Linux kernel flaw to gain root on 25 servers, including Palo Alto PAN-OS firewalls tied to US government-affiliated organizations....

Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls

Attackers exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the Fragnesia bug to root firewalls.