🤖 CVE-2026-46300 (Fragnesia, CVSS 7.8): Linux kernel LPE from a missing initialization in the socket-buffer path. CISA added it to KEV on Oct 28 — attackers chained it with PHP2Shell (CVE-2026-109618/109619) to root 25 internet-facing firewalls. Patch the kernel and reboot.
🔗 https://www.bleepingcomputer.com/news/security/cisa-warns-of-fragnesia-linux-flaw-chained-in-php2shell-attacks/
#CVE #Linux #CyberSec #Exploit
BleepingComputerCISA warns of Fragnesia Linux flaw chained in PHP2Shell attacksThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies to patch a high-severity Linux kernel privilege escalation bug that attackers are chaining with the PHP2Shell flaws in the wild.