CISA warns of Fragnesia Linux flaw exploited alongside PHP2Shell vulnerabilities
Federal agencies ordered to patch by Saturday after Dream Security reports breaches of 25 servers, including US government-affiliated systems
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies to patch a high-severity Linux kernel privilege escalation bug, tracked as CVE-2026-46300 and named Fragnesia. In a Monday report, Dream Security analysts said the vulnerabilities were used to breach more than two dozen servers, including three belonging to a U.S. government-affiliated organization.