Fragnesia

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenOct 29, 2026
Last mentioned1d ago

Timeline

2 articles · newest first

Chained PHP2Shell exploit roots 25 firewalls, including US government systems

Dream says a custom PHP2Shell build plus the Fragnesia kernel bug yielded unauthenticated root and Active Directory access.

Hacker News · securityupdated 15:43 UTC · 7h agofirst Oct 29, 10:42 UTC · 1d agoExploit / PoCExploited26 sources HN 21 points · 6 commentsCVE-2026-109618 CVE-2026-109619 CVE-2026-463001

Attackers chain PHP2Shell flaws to root 25 firewall servers

Dream says the chain, including kernel flaw CVE-2026-46300, rooted devices in the US, Japan, Taiwan, and South Korea in under 15 minutes.

GBHackersupdated 15:43 UTC · 7h agofirst Oct 29, 04:59 UTC · 1d agoExploit / PoCExploited26 sourcesCVE-2026-109618 CVE-2026-109619 CVE-2026-463001

Related CVEs

by mentions

CVE-2026-109619100%9.2
Use-after-free RCE in PHP via stale request globals
published 9d agophpKEVPoC ×15
CVE-2026-109618100%9.2
OOM longjmp memory flaw enabling RCE in PHP
published 9d agophpKEVPoC ×25
CVE-2026-4630016%7.8
Shared-frag marker loss in Linux kernel skb coalescing (LPE)
published May 23, 2026linux kernelKEVPoC

Appears with

Dreamorganization · 2
DeepSeekai model · 1
PHPproduct · 1
Kimiai model · 1
PHP2Shellmalware · 1
Claudeai model · 1

Entities are extracted by the model from each article. First seen Oct 29, 2026, last mentioned 1d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.