Critical CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

Critical CVEs

Newest first · severity as published by the vendor or NVD · page 125 of 166

  • 9.1 /10 Critical
    CVE-2026-90413 No auth

    Linux Kernel - Out-of-Bounds Read

    Linux kernel contains a buffer over-read vulnerability in IB/isert due to accepting login PDUs declaring more data than received, letting remote attackers cause out-of-bounds read, exploit requires crafted login PDUs with mismatched declared length.

  • 9.8 /10 Critical
    CVE-2026-90235 No auth

    Linux Kernel - Race Condition

    Linux kernel contains a race condition in sunrpc xprtsock caused by improper synchronization of shared socket callback pointers, letting concurrent CPUs invoke stale callbacks, exploit requires concurrent socket operations.

  • 9.1 /10 Critical
    CVE-2026-90230

    Linux Kernel - Out of Bounds Read

    Linux kernel contains a heap out-of-bounds read in nvmet_auth_negotiate() caused by improper validation of host-supplied transfer length and identifiers, letting malicious hosts cause memory read beyond buffer, exploit requires crafted malicious host input.

  • 9.8 /10 Critical
    CVE-2026-90173 No auth

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in smbdirect caused by improper teardown of completion queues with ib_destroy_cq(), letting attackers cause kernel memory corruption, exploit requires triggering late completion after queue destruction.

  • 9.8 /10 Critical
    CVE-2026-90151 No auth

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in NFSv4 callback IDR handling caused by improper cleanup on client allocation failure, letting local attackers cause stale pointer dereference, exploit requires local access.

  • 9.4 /10 Critical
    CVE-2026-90110 No auth

    Linux Kernel - Side Channel

    Linux kernel inetpeer contains a side-channel vulnerability caused by deterministic RB-tree node comparison in inetpeer rate limiting, letting off-path attackers bypass IP-keyed ICMP rate limits by forcing eviction and reset of rate tokens, exploit requires network access to send packets.

  • 9.8 /10 Critical
    CVE-2026-90104 No auth

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in NFSv4.1 caused by uninitialized referring call lists in decode_cb_sequence_args, letting attackers cause denial of service via stale memory free, exploit requires NFSv4.1 usage.

  • 9.0 /10 Critical
    CVE-2026-88795 No auth

    wpShopGermany IT-RECHT KANZLEI WordPress plugin - Remote Code Execution

    wpShopGermany IT-RECHT KANZLEI WordPress plugin < 2.4 contains a remote code execution caused by insecure API authentication token generation derived from requester-controlled data, letting unauthenticated attackers write arbitrary files remotely.

  • 9.8 /10 Critical
    CVE-2026-87796 PoC publicNo auth

    Multi Uploader for Gravity Forms - Unrestricted File Upload

    Multi Uploader for Gravity Forms WordPress plugin <= 1.1.9 contains an arbitrary file upload vulnerability caused by insufficient file type validation in move_file function during chunked upload handling, letting unauthenticated attackers upload arbitrary files, exploit requires no authentication.

  • 9.6 /10 Critical
    CVE-2026-87701 Auth required

    Azure Cosmos DB - Privilege Escalation

    Azure Cosmos DB contains a privilege escalation caused by improper neutralization of special elements in output used by a downstream component, letting authorized attackers elevate privileges over a network, exploit requires attacker authorization.

  • 9.8 /10 Critical
    CVE-2026-86863 No auth

    pgAdmin 4 - Authentication Bypass

    pgAdmin 4 from 6.2 before 9.18 contains an authentication bypass caused by improper trust of HTTP headers in WebserverAuthentication, letting remote attackers authenticate as any user without credentials, exploit requires 'webserver' enabled in AUTHENTICATION_SOURCES.

  • 9.8 /10 Critical
    CVE-2026-86710 No auth

    Login with QR WordPress plugin - Authentication Bypass

    Login with QR WordPress plugin through 1.0.0 contains an authentication bypass caused by improper verification of login codes, letting unauthenticated attackers log in as any user including administrators, exploit requires no authentication.

  • 9.8 /10 Critical
    CVE-2026-86709 No auth

    Pressengine WordPress - Authentication Bypass

    Pressengine WordPress plugin through 1.0 contains an authentication bypass caused by the login handler issuing a session even when authentication fails, letting unauthenticated attackers log in as any user including administrators.

  • 9.8 /10 Critical
    CVE-2026-86707 No auth

    Private Feed WordPress - Authentication Bypass

    Private Feed WordPress plugin through 0.1 contains an authentication bypass caused by improper verification of feed request keys, letting unauthenticated attackers log in as any user including administrators, exploit requires no special privileges.

  • 10.0 /10 Critical
    CVE-2026-85889 No auth

    Azure AI Foundry - Broken Access Control

    Azure AI Foundry contains a broken access control caused by missing authentication for a critical function, letting unauthorized attackers elevate privileges over a network, exploit requires no special privileges.