CISA warns of a Fragnesia Linux flaw chained in PHP2Shell attacks

CISA warned federal agencies to patch the high-severity Linux kernel privilege-escalation vulnerability CVE-2026-46300, known as Fragnesia. Attackers have chained it with the critical PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619. The source states that the vulnerabilities have been used in attacks and that Fragnesia was added to CISA’s Known Exploited Vulnerabilities Catalog.