Critical CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 13360
- Critical
- 2486
- CISA KEV
- 125
- Public PoC
- 437
Most common types
- Broken Access Control 1691
- Remote Code Execution 1609
- Privilege Escalation 1307
- Authentication Bypass 1121
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026
Critical CVEs
Newest first · severity as published by the vendor or NVD · page 122 of 166
- 9.3 /10 CriticalCVE-2026-75885 No auth
OpenShift Console - Server-Side Request Forgery & Denial of Service
OpenShift console contains a server-side request forgery and denial of service caused by unauthenticated access to /api/devfile/ endpoints allowing crafted payloads and large repeated requests, letting remote attackers cause SSRF and DoS, exploit requires no authentication.
- 9.1 /10 CriticalCVE-2026-75878 No auth
IBM Sterling File Gateway - Authentication Bypass
IBM Sterling File Gateway contains an authentication bypass caused by improper validation of SSO header, letting remote attackers obtain fully authenticated sessions, exploit requires crafted SSO header.
- 9.8 /10 CriticalCVE-2026-75031
Interchange - Remote Code Execution
Interchange contains a remote code execution caused by arbitrary Perl code injection in the "quick question" admin feature, letting unauthenticated attackers execute code server-side, exploit requires AllowGlobal directive enabled.
- 10.0 /10 CriticalCVE-2026-69843 No auth
Microsoft Fabric - Authentication Bypass
Microsoft Fabric contains an authentication bypass caused by spoofing, letting unauthorized attackers elevate privileges over a network, exploit requires network access.
- 9.3 /10 CriticalCVE-2026-67101 No auth
HCL BigFix Service Management - Server-Side Request Forgery
HCL BigFix Service Management contains a server-side request forgery caused by improper validation in search functionality, letting attackers force the server to send requests to internal systems, exploit requires network access.
- 9.8 /10 CriticalCVE-2026-67100 No auth
HCL BigFix Service Management - SQL Injection & Broken Access Control
HCL BigFix Service Management contains an SQL Injection and Cross-Tenant Data Exposure caused by improper input validation and request handling, letting authenticated attackers extract sensitive data and access personal profiles across tenants, exploit requires authentication.
- 10.0 /10 CriticalCVE-2026-62874 No auth
Azure Billing - Broken Access Control
Azure Billing contains a broken access control vulnerability caused by insufficient verification of data authenticity, letting unauthorized attackers elevate privileges over a network, exploit requires network access.
- 9.9 /10 CriticalCVE-2026-61781 Auth required
pg_partman - Command Injection
pg_partman prior to 5.5.0 contains a command injection caused by unquoted interpolation of part_config.time_encoder in create_partition_time(), letting roles with partman_user INSERT/UPDATE privileges execute arbitrary SQL with superuser privileges, exploit requires partman_user role privileges.
- 9.9 /10 CriticalCVE-2026-61682 Auth required
kcp - Broken Access Control
kcp < 0.31.4 and < 0.32.2 contains a broken access control vulnerability caused by front-proxy not removing inbound identity headers, letting authenticated tenants impersonate identities and bypass authorization, exploit requires tenant authentication.
- 9.8 /10 CriticalCVE-2026-61550
Icinga 2 - Authentication Bypass
Icinga 2 2.8 to 2.14.9, 2.15.4, and 2.16.2 contains a broken authentication caused by lack of validation of sender in certificate update JSON-RPC message handling, letting unauthenticated network attackers impersonate trusted nodes and take control, exploit requires network access to TCP port 5665.
- 9.1 /10 CriticalCVE-2026-59163
Mnemosyne - Authentication Bypass
Mnemosyne < 3.10.1 contains a broken authentication caused by disabled JWT signature verification in sync_server.py, letting attackers bypass authentication with any well-formed token, exploit requires network access to the sync server endpoint.
- 9.8 /10 CriticalCVE-2026-58264 No auth
FluidSynth - Buffer Overflow
FluidSynth 1.1.2 to 2.5.6 contains a buffer overflow caused by lack of bounds checking on the pitch_bend_range command channel argument in the command handler, letting remote or local attackers cause denial of service or execute code, exploit requires use of TCP server or command shell.
- 9.8 /10 CriticalCVE-2026-13684 No auth
Synology DiskStation Manager - Improper Output Encoding
Synology DiskStation Manager (DSM) < 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4, and 7.4-90075 contains an improper encoding or escaping of output vulnerability in SCGI, letting remote attackers read or write arbitrary files and cause denial-of-service, exploit requires network access.
- 9.8 /10 CriticalCVE-2026-13639 No auth
Synology DiskStation Manager - Insufficient Entropy Vulnerability
Synology DiskStation Manager (DSM) < 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4, and 7.4-90075 contains an insufficient entropy vulnerability in login logic, letting remote attackers read or write arbitrary files and cause denial of service, exploit requires network access.
- 9.9 /10 CriticalCVE-2026-10858 Auth required
IBM MQ for HPE NonStop - Buffer Overflow
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 contains a buffer underflow caused by improper processing of multi-segment messages, letting authenticated attackers cause denial of service or execute arbitrary code.