us government-affiliated environment

China-Linked Hackers Exploit PHP2Shell to Root Firewalls

Chinese-linked hackers exploited two PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) and a Linux kernel vulnerability (CVE-2026-46300) – PHP2Shell and Fragnesia – to gain root access to firewalls and deploy web…