A custom PHP2Shell exploit chained with a kernel local privilege escalation flaw has been used in the wild to root 25 servers, including US government systems and firewalls. The attack highlights a dangerous exploit chain that turns web-level access into full system compromise.