Critical CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

Critical CVEs

Newest first · severity as published by the vendor or NVD · page 103 of 125

  • 9.8 /10 Critical
    CVE-2026-57148 No auth

    PraisonAI praisonai-platform - Authentication Bypass

    PraisonAI praisonai-platform < 0.1.6 contains a broken authentication caused by fallback to a public HS256 signing key and disabled guards, letting unauthenticated attackers impersonate users or workspace owners, exploit requires knowledge of target identifier.

  • 9.8 /10 Critical
    CVE-2026-57147 No auth

    PraisonAI praisonai-platform - Authentication Bypass

    PraisonAI praisonai-platform < 0.1.6 contains a broken authentication caused by default JWT_SECRET and missing production guard in auth_service.py, letting remote unauthenticated attackers forge tokens and bypass authentication, exploit requires PLATFORM_JWT_SECRET and PLATFORM_ENV unset.

  • 9.8 /10 Critical
    CVE-2026-57141 No auth

    PraisonAI - Command Injection

    PraisonAI < 1.7.2 contains a command injection caused by execution of model-generated JavaScript using new Function() and with(sandbox), letting attackers execute OS commands and access host process capabilities, exploit requires attacker to influence the code argument.

  • 9.4 /10 Critical
    CVE-2026-57140 No auth

    PraisonAI - Authentication Bypass

    PraisonAI 1.6.0 to 1.7.2 contains an authentication bypass caused by missing authentication middleware on GET /api/agents and POST /api/chat endpoints, letting remote attackers access agent data and invoke agents, exploit requires network access to the service.

  • 9.8 /10 Critical
    CVE-2026-57139

    PraisonAI - Authentication Bypass

    PraisonAI 1.5.0 to 1.7.2 contains an authentication bypass caused by unrestricted HTTP POST requests in MCPServer.startHttp(), letting remote attackers execute server-side handlers with elevated privileges or disclose data, exploit requires network access to the port.

  • 9.9 /10 Critical
    CVE-2026-57138 Auth required

    PraisonAI - Remote Code Execution

    PraisonAI 1.4.0 to 1.7.2 contains a remote code execution caused by insecure sandboxing in codeMode using new Function() and bypassing restrictions, letting attackers execute arbitrary code and access host resources, exploit requires control of codeMode input.

  • 9.8 /10 Critical
    CVE-2026-56960 No auth

    Unknown - Use After Free

    Unknown product contains a use-after-free caused by a logic error in multiple locations, letting remote attackers escalate privileges without additional execution privileges, exploit requires no user interaction.

  • 9.8 /10 Critical
    CVE-2026-55366 No auth

    IP Multimedia Subsystem - Authentication Bypass

    IP Multimedia Subsystem contains an authentication bypass caused by a logic error in the code, letting remote attackers escalate privileges without additional execution privileges, exploit requires no user interaction.

  • 9.8 /10 Critical
    CVE-2026-55211 No auth

    Surfio - Buffer Overflow

    Surfio < 0.0.19 contains a buffer overflow caused by improper validation of size fields in IRAP files, letting attackers cause memory corruption when parsing untrusted files, exploit requires untrusted file input.

  • 9.1 /10 Critical
    CVE-2026-55158 No auth

    Conflibot - Command Injection

    Conflibot < 1.2.1 contains a command injection caused by unsafe interpolation of attacker-controlled pull request branch names in exec commands, letting attackers execute arbitrary commands with repository secrets, exploit requires pull_request_target workflow usage.

  • 9.8 /10 Critical
    CVE-2026-54337 PoC publicNo auth

    Fireshare - Command Injection

    Fireshare < 1.6.14 contains a command injection caused by improper sanitization of arguments in the video upload function, letting unauthenticated attackers write or overwrite system files remotely, exploit requires no authentication.

  • 10.0 /10 Critical
    CVE-2026-53710 No auth

    MCP Context Forge - Command Injection

    MCP Context Forge < 1.0.2 contains a command injection caused by unsafe getattr exposure in python_sandbox_server allowing attackers to execute OS commands via execute_code tool, exploit requires network access to HTTP/SSE transport.

  • Critical
    CVE-2026-52824 PoC publicNo auth

    Kimai - Default APP_SECRET Authentication Bypass

    Kimai <= 2.57.0 contains a broken authentication vulnerability caused by a hardcoded default APP_SECRET used to sign login tokens, letting unauthenticated attackers hijack any user account including super-admin.

  • 9.9 /10 Critical
    CVE-2026-45579 Auth required

    DIRAC - Command Injection

    DIRAC < 8.0.79, 9.0.22, 9.1.10 contains a command injection caused by unsafe evaluation of caller-controlled groupingAttribute in ReqManagerHandler.py, letting authenticated attackers execute OS commands, exploit requires authentication.

  • 9.8 /10 Critical
    CVE-2026-39919 No auth

    Ghostscript - Remote Code Execution

    Ghostscript < 10.08.0 contains a heap-based buffer overflow caused by mismatched component subsampling factors in JPEG 2000 output adapter, letting attackers cause memory corruption and execute code via crafted PDF, exploit requires crafted PDF input.