gcdRadar
live/Patch now/AIR-2026-1650
livelivePatch now3 Confirmed exploitation

CISA warns of exploited Fragnesia Linux privilege escalation flaw

Fragnesia Linux

CISA issued a warning regarding a high-severity Linux kernel privilege escalation vulnerability being actively chained in the wild with PHP2Shell flaws. Federal agencies have been instructed to apply patches.

why this severityConfirmed exploitation in the wild reported by CISA.

fix status
No patch yet
first report
29 Oct 2026
last update
29 Oct 2026

What to do

Patch the affected Linux kernel components as advised by CISA.

Timeline · 1

  1. 29 Oct 2026CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks

Sources · 1

News and write-ups

  1. 2026-10-29
    CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks
    BleepingComputer · bleepingcomputer.com/news/security/cisa-warns-of-fragnesia-linux-flaw-chained-in

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
No AI role
categories
General security
severity
3 · Confirmed exploitation
fix status
No patch yet
targets
Not applicable
owasp llm top 10
no entry for these categories
mitre atlas
no technique for these categories
dates
happened 29 Oct 2026 · first reported 29 Oct 2026
origin
News & research feeds
record
confidence 0.95 · created 2026-10-29 19:37Z · updated 2026-10-29 19:37Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# CISA warns of exploited Fragnesia Linux privilege escalation flaw

https://gcdradar.vercel.app/incidents/cisa-warns-of-exploited-fragnesia-linux-privilege-escalation · AIR-2026-1650 · live

- Lane: Patch now
- Severity: 3 (Confirmed exploitation): Confirmed exploitation in the wild reported by CISA.
- Fix status: No patch yet
- First reported: 2026-10-29
- AI role: No AI role
- Products: Fragnesia Linux

## Summary

CISA issued a warning regarding a high-severity Linux kernel privilege escalation vulnerability being actively chained in the wild with PHP2Shell flaws. Federal agencies have been instructed to apply patches.

## What to do

Patch the affected Linux kernel components as advised by CISA.

## Latest updates

- 2026-10-29: CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks (https://bleepingcomputer.com/news/security/cisa-warns-of-fragnesia-linux-flaw-chained-in-php2shell-attacks)

## Sources

- 2026-10-29 BleepingComputer: CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks https://bleepingcomputer.com/news/security/cisa-warns-of-fragnesia-linux-flaw-chained-in-php2shell-attacks

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. live
  2. live8.6
    UnrealIRCd CVE-2026-114713: UnrealIRCd improper neutralization of delimiters vulnerability

    Patch now · Exploited · Partly patched · since 13 Nov 2026 · CVE-2026-114713

  3. live
  4. live
    University of Texas at Arlington discloses data breach from cyberattack

    Breaches & attacks · Exploited · since 13 Nov 2026

  5. live
  6. live