Security AlertCritical
CISA says Fragnesia Linux flaw is being chained with PHP2Shell attacks
Oct 29, 2026 · Summarized by Fundy Tech from 2 sources
The 30-second version
CISA has told federal agencies to patch a Linux privilege-escalation flaw called Fragnesia. It says attackers can chain it with PHP2Shell to install webshells and run root commands.
Key points
- Fragnesia is tracked as CVE-2026-46300.
- CISA ordered federal agencies to patch by Saturday 10.
- Dream Security says 25 servers were rooted across several countries.
Why it matters
This points to active, chained attacks on Linux systems. For businesses, it raises the risk of server compromise if PHP and kernel flaws are both unpatched. For households, the direct impact is lower, but services hosted on affected systems could be exposed or taken offline.
Who’s affected: Linux servers and federal systems
What to do
- Patch CVE-2026-46300 and the PHP2Shell flaws.
- Look for signs of webshells or unusual root access.
- Follow CISA guidance if you run affected Linux servers.
Vulnerability IDs
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.