Dream Security

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenOct 29, 2026
Last mentioned20h ago

Timeline

2 articles · newest first

Attackers chain PHP2Shell with Fragnesia kernel bug for root

Dream Security says the chain rooted Palo Alto firewalls and reached Active Directory on 25 servers, three tied to the US government.

CSO Onlineupdated 15:43 UTC · 6h agofirst 00:55 UTC · 20h agoExploit / PoCExploited26 sourcesCVE-2026-46300 CVE-2026-109618 CVE-2026-1096191

CISA warns Fragnesia Linux flaw is chained in PHP2Shell attacks

Agencies must patch CVE-2026-46300 by Saturday 10; researchers say the chain rooted 25 servers, including three US government-affiliated hosts.

BleepingComputerupdated 15:43 UTC · 6h agofirst Oct 29, 13:59 UTC · 1d agoExploit / PoCExploited26 sourcesCVE-2026-46300 CVE-2026-109618 CVE-2026-1096196 · 4 reads

Related CVEs

by mentions

CVE-2026-109619100%9.2
Use-after-free RCE in PHP via stale request globals
published 9d agophpKEVPoC ×15
CVE-2026-109618100%9.2
OOM longjmp memory flaw enabling RCE in PHP
published 9d agophpKEVPoC ×25
CVE-2026-4630016%7.8
Shared-frag marker loss in Linux kernel skb coalescing (LPE)
published May 23, 2026linux kernelKEVPoC

Appears with

Linux kernelproduct · 2
PHPproduct · 2
CISAorganization · 2
PHP Foundationorganization · 1
DeepSeekai model · 1
PAN-OSproduct · 1
Kimiai model · 1
Palo Alto Networksvendor · 1

Entities are extracted by the model from each article. First seen Oct 29, 2026, last mentioned 20h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.