Critical CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Critical CVEs
Newest first · severity as published by the vendor or NVD · page 107 of 125
- 9.8 /10 CriticalCVE-2026-73668 No auth
Apache Syncope - Broken Access Control
Apache Syncope 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7, and 4.1.0-M0 through 4.1.2 contain an incorrect authorization vulnerability caused by inadequate realm access control in REST API, letting administrators read confidential connector configurations from other realms, exploit requires administrator privileges.
- 9.8 /10 CriticalCVE-2026-73579 No auth
Apache Syncope - Broken Access Control
Apache Syncope 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7, and 4.1.0-M0 through 4.1.2 contain an incorrect authorization vulnerability caused by an empty Realms filter in non-recursive search requests, letting attackers bypass permission restrictions, exploit requires crafted non-recursive search requests.
- 9.8 /10 CriticalCVE-2026-73470 No auth
Apache Syncope - Improper Privilege Management
Apache Syncope 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7, and 4.1.0-M0 through 4.1.2 contain an improper privilege management vulnerability caused by delegation of roles outside the user's ownership or realm subtree, letting attackers escalate privileges, exploit requires delegation management permissions.
- 9.8 /10 CriticalCVE-2026-73370 No auth
Apache Syncope - Broken Access Control
Apache Syncope 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7, and 4.1.0-M0 through 4.1.2 contain an incorrect authorization vulnerability caused by incomplete delegated administration security checks in the Reconciliation service's pull and push, letting administrators without adequate entitlements perform unauthorized actions, exploit requires attacker to be an authenticated administrator.
- 9.8 /10 CriticalCVE-2026-65414 No auth
Apple - Out of Bounds Write
Apple iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 contain an out-of-bounds write caused by insufficient bounds checking, letting remote attackers cause app termination or execute arbitrary code, exploit requires remote access.
- 10.0 /10 CriticalCVE-2026-65381 No auth
Apple macOS - Sandbox Escape
Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain a sandbox escape caused by improper entitlement verification, letting malicious apps break out of their sandbox, exploit requires malicious app execution.
- 9.1 /10 CriticalCVE-2026-61534 No auth
Yayson - Prototype Pollution
Yayson < 4.3.0 contains a prototype pollution vulnerability caused by attacker-controlled JSON:API type, id, and relationship names used as keys in object lookup tables, letting attackers cause process-wide prototype pollution, exploit requires crafted JSON:API documents.
- 9.8 /10 CriticalCVE-2026-59178 No auth
ESPHome Device Builder Dashboard - Authentication Bypass
ESPHome Device Builder Dashboard prior to 1.0.12 contains an authentication bypass caused by removal of fallback environment variables for credentials, letting unauthenticated attackers access the dashboard remotely, exploit requires exposed dashboard port.
- 9.1 /10 CriticalCVE-2026-57145
PraisonAI - Path Traversal
PraisonAI < 4.6.62 contains a path traversal vulnerability caused by lack of traversal rejection and symlink resolution in file operations in multiedit.py, letting prompt-influenced agents read or overwrite files, exploit requires LLM-controlled filepath input.
- 9.8 /10 CriticalCVE-2026-57131 No auth
PraisonAI - Broken Access Control
PraisonAI < 4.6.58 contains a broken access control caused by missing authentication and per-job authorization in praisonai.jobs.server.create_app mounting praisonai.jobs.router.create_router under /api/v1/runs, letting network attackers list, read, cancel, delete jobs, and execute unauthorized agents, exploit requires network access.
- 9.8 /10 CriticalCVE-2026-57127
PraisonAI - Authentication Bypass
PraisonAI < 4.6.58 contains an authentication bypass caused by APIKeyAuthMiddleware or JWTAuthMiddleware forwarding requests without required keys, letting unauthenticated clients access recipe execution and connected tools, exploit requires missing environment keys.
- 9.8 /10 CriticalCVE-2026-57125 No auth
PraisonAI - Command Injection
PraisonAI < 4.6.59 and praisonaiagents < 1.6.59 contain a command injection caused by unauthenticated POST /api/v1/runs accepting attacker-controlled agent_yaml and bypassing approval checks, letting remote attackers execute arbitrary OS commands without credentials or interaction.
- 9.8 /10 CriticalCVE-2026-57124
PraisonAI - Command Injection
PraisonAI < 4.6.59 contains a command injection caused by unauthenticated POST /api/mcp/connect accepting caller-controlled command and args, letting unauthenticated remote attackers execute commands as the UI service account, exploit requires network access to the UI host.
- 9.8 /10 CriticalCVE-2026-57123 No auth
PraisonAI praisonaiagents - Broken Access Control
PraisonAI praisonaiagents < 1.6.59 contains a broken access control caused by missing authentication and origin-validation in ToolsMCPServer routes, letting any reachable client invoke registered tools, exploit requires network access.
- 9.8 /10 CriticalCVE-2026-55209 No auth
resdata - Buffer Overflow
resdata < 6.2.9 contains a buffer overflow and out-of-bounds read caused by insufficient validation of numeric fields and array indexes in GRDECL file parsing, letting remote attackers cause memory corruption or denial of service, exploit requires untrusted GRDECL file input.