CISA adds Fragnesia to KEV after PHP2Shell attacks rooted 25 servers

CISA has added the Linux kernel flaw Fragnesia (CVE-2026-46300) to its Known Exploited Vulnerabilities catalog and ordered federal agencies to patch it. The move follows reports that attackers chained it with PHP2Shell to root 25 servers, including three in a government-affiliated environment, as detailed in the reported 25-server campaign. Source

Läs hela artikeln hos källan.