CVE-2026-46300HIGH
CVE-2026-46300 "Fragnesia": Linux kernel page-cache write LPE chained with PHP2Shell on PAN-OS
Linux kernel LPE in the XFRM ESP-in-TCP path lets local users write into the page cache; exploited with PHP2Shell to root PAN-OS firewalls.
Updated 2026-11-11