Thursday’s brief: PHP2Shell attackers root firewalls with a Linux bug, then WordPress 7.1.4, Jenkins and Oracle E-Business Suite

By George Bailey   Published: 10/29/26   2 min read
Cyber News

Good morning. CISA added a Linux kernel flaw called Fragnesia to its exploited list on Wednesday, after researchers showed attackers pairing it with PHP2Shell to take root on 24 firewalls. The federal deadline is Saturday. WordPress shipped 22 security fixes, Jenkins fixed 15 core flaws, and the Oracle E-Business Suite bug we flagged last week now has attackers testing it.

Lead Story

Fragnesia, a Linux kernel bug from May, turned PHP2Shell break-ins into root on 24 firewalls. CISA wants it fixed by October 31. Check memory, then reboot →

Also Worth Your Attention

WordPress 7.1.4 fixes 22 security issues, most reachable from a contributor account. Check every site’s version →

Jenkins 2.588 and LTS 2.580.2 fix 15 core flaws, several leading to code on the controller. Upgrade path →

The Oracle E-Business Suite SQL injection bug we flagged now has exploit attempts on decoys. Close the servlet →

Also on the radar: Today, October 29, is CISA’s federal deadline for the two PHP2Shell flaws (CISA alert). Tailscale shipped version 1.104.4 with fixes for the Tailscale SSH forwarding flaws we mentioned yesterday (Tailscale security bulletins). Sophos UTM, which is end of life, has a manual patch for a pre-login root bug in its email proxy (Sophos advisory).

Too many patches for one week? Our patch priority checklist helps put exploited, internet-facing systems first.

Source: CISA KEV addition; Dream Research on the chain; WordPress 7.1.4; Jenkins advisory; Horizon3 on Oracle EBS

Go Deeper

Get this in your inbox every weekday morning: subscribe to the Daily Brief.

George Bailey

George Bailey is the byline of the CyberExperts editorial desk, the team behind the CyberExperts Daily Brief. The desk covers vulnerabilities, breaches and security news from vendor advisories, CISA alerts and other primary sources, and links those sources in every story. Questions or corrections: [email protected].