CVE-2026-46300 was public in May and hit KEV in October. How the kernel bug turns a PHP2Shell web shell into root on 25 ...