CVE-2026-46300

Vendor

Linux kernel

Product

Kernel

CVSS v4.0

9.2

EPSS

0.16 (p97)

CISA KEV

added 28 Oct 2026, due 31 Oct 2026 (1d overdue)

Weakness

CWE-456

Exposure class

Operating system, Web platform, Network management, OT / ICS

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 86
   KEV CISA KEV 4d ago

   Linux Kernel Missing Initialization of a Variable Vulnerability

   Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during socket buffer coalescing…

   KEV · due 31 Oct 2026 (overdue) EPSS 0.16 Fix available CVE-2026-46300 Linux kernel
2. 79
   Tenable research Tenable 2d ago

   php2shell one week later: Why one exploit doesn’t work everywhere

   php2shell raised fears of mass exploitation. A week of testing by our research team found that working exploits had to be fitted to each target’s exact PHP setup. Systems that share one build, such as network appliances, are the…

   Exploited CVSS 9.2 EPSS 0.16 Fix available CVE-2026-109618CVE-2026-109619CVE-2021-44228+1 more PHP
3. 68
   Tenable research Tenable 10d ago

   php2shell (CVE-2026-109618, CVE-2026-109619): Frequently asked questions about critical PHP remote code execution vulnerabilities

   Two critical PHP vulnerabilities could lead to unauthenticated remote code execution. Patches are available for supported PHP 8.x branches, and exploitation attempts began before public disclosure. Change log Update October 28…

   Exploited CVSS 9.2 EPSS 0.16 No fix yet CVE-2026-109618CVE-2026-109619CVE-2026-46300+5 more PHP
4. 66
   CISA alert CISA 3d ago

   CISA Adds Two Known Exploited Vulnerabilities to Catalog

   CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-41709 Broadcom VMWare ESX Insufficient Logging Vulnerability CVE-2026-46300 Linux…

   Exploited EPSS 0.16 CVE-2026-41709CVE-2026-46300 VMware (Broadcom) Linux kernel
5. 51
   CISA advisory CISA 23 Jun 2026

   Impact of Linux Kernel vulnerabilities on B&R products

   B&R is aware of publicly reported vulnerabilities affecting the Linux kernel versions shipped with the products listed as affected in the advisory. Successful local exploitation of these vulnerabilities could allow an attacker to…

   PoC public CVSS 3.1 EPSS 0.16 CVE-2026-31431CVE-2026-43284CVE-2026-46333+2 more Linux kernel ABB
6. 34
   Research Elastic Security Labs 11 Sep 2026

   Linux Detection Engineering - Local Privilege Escalation

   Seven of the thirteen Linux privilege escalation CVEs we tracked in 2026 turned out to be the same copy-on-write bug pointed at different kernel interfaces. We ran the public proof-of-concept for eleven exploits and two…

   PoC public EPSS 0.16 CVE-2026-64600CVE-2026-31431CVE-2026-43284+8 more
7. 31
   News The Register 2d ago

   Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers

   Snoops 'likely still' have access to US government-affiliated network

   EPSS 0.16 CVE-2026-109618CVE-2026-109619CVE-2026-46300 PHP