🛡️ CVE-2026-46300

The items that name it 7

• CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks
  article2026-10-29
• CISA Adds Two Known Exploited Vulnerabilities to Catalog
  advisory2026-10-28
• China-Linked Hackers Exploit PHP2Shell to Root Firewalls
  article2026-10-28
• Dirty Frag (CVE-2026-43284): the Linux kernel bug that turns read access into root
  writeup2026-09-04

  Tracked as 'Fragnesia', a later variant of Dirty Frag. Caused by an old 2013 bug in the code that merges packet fragments together, which quietly drops a marker indicating a fragment is shared and needs a safe copy before being touched; the Dirty Frag fix depended on this marker, turning a dormant b

• PathSentinel Radar
  tool2026-05-16
• Panic at the Distro
  writeup2026-05-14

  Vulnerability in the Linux XFRM ESP-in-TCP kernel subsystem allowing arbitrary byte writes into the kernel page cache of read-only files without requiring a race condition, leading to local privilege escalation. Announced by William Bowling of the V12 security team on May 13, 2026.

• Vulnerability Garden
  tool2026-05-13