Critical CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 13360
- Critical
- 2486
- CISA KEV
- 125
- Public PoC
- 437
Most common types
- Broken Access Control 1691
- Remote Code Execution 1609
- Privilege Escalation 1307
- Authentication Bypass 1121
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026
Critical CVEs
Newest first · severity as published by the vendor or NVD · page 128 of 166
- 9.1 /10 CriticalCVE-2026-92717 No auth
Covenant - Authentication Bypass
Covenant <= 0.6 contains a broken authentication caused by missing Authorize attribute on CovenantHub SignalR hub, letting unauthenticated attackers obtain signed JWT tokens and access operator API, exploit requires no authentication.
- 9.6 /10 CriticalCVE-2026-92716 Auth required
Shuffle - Privilege Escalation
Shuffle 2.2.1 contains a privilege escalation caused by improper access control in HandleApiGeneration endpoint, letting administrators reset and read API keys of users in other organizations, exploit requires admin privileges.
- 9.1 /10 CriticalCVE-2026-92398 Auth required
Ruijie RG-EW3000GX - Command Injection
Ruijie RG-EW3000GX EW_3.0(1)B11P380 contains a command injection caused by manipulation of the "Name" argument in /etc/rg_config/admin user_list_note module, letting remote attackers execute arbitrary OS commands, exploit requires no special privileges.
- 9.1 /10 CriticalCVE-2026-92397 Auth required
Ruijie RG-EW3000GX - Command Injection
Ruijie RG-EW3000GX EW_3.0(1)B11P380 contains a command injection caused by manipulation of the argument data.url in cc_set function of configChange component, letting remote attackers execute arbitrary OS commands, exploit requires remote access.
- 9.1 /10 CriticalCVE-2026-92395 No auth
@fastify/proxy-addr - Broken Access Control
@fastify/proxy-addr 3.0.0 through 5.1.0 contains a broken access control vulnerability caused by improper handling of IPv4-mapped IPv6 trust subnets, letting unauthenticated clients bypass IP-based restrictions by controlling X-Forwarded-For header, exploit requires crafted X-Forwarded-For header.
- 9.8 /10 CriticalCVE-2026-91843 PoC publicNo auth
Unspecified Product - Buffer Overflow
An unspecified product contains a buffer overflow caused during the unauthenticated login process, letting remote attackers execute arbitrary code with root privileges, exploit requires no special conditions.
- 9.8 /10 CriticalCVE-2026-91106
HP HPLIP - Multiple Vulnerabilities
HP HPLIP contains multiple vulnerabilities in various components, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions, exploit requires specific conditions.
- 9.8 /10 CriticalCVE-2026-91105
HP HPLIP - Multiple Vulnerabilities
HP HPLIP contains multiple vulnerabilities in various components, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification, exploit requires specific conditions.
- 9.8 /10 CriticalCVE-2026-91104
HP HPLIP - Multiple Vulnerabilities
HP HPLIP contains multiple vulnerabilities in various components, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions, exploit requires specific conditions.
- 9.8 /10 CriticalCVE-2026-91103
HP HPLIP - Multiple Vulnerabilities
HP HPLIP contains multiple vulnerabilities in various components, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification, exploit requires specific conditions.
- 9.8 /10 CriticalCVE-2026-91102
HP HPLIP - Multiple Vulnerabilities
HP HPLIP contains multiple vulnerabilities in various components, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions, exploit requires specific conditions.
- 9.8 /10 CriticalCVE-2026-91101
HP HPLIP - Multiple Vulnerabilities
HP HPLIP contains multiple vulnerabilities in various components, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification, exploit requires specific conditions.
- 9.8 /10 CriticalCVE-2026-91100
HP HPLIP - Multiple Vulnerabilities
HP HPLIP contains multiple vulnerabilities in various components, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions, exploit requires specific conditions.
- 9.8 /10 CriticalCVE-2026-91099
HP HPLIP - Multiple Vulnerabilities
HP HPLIP contains multiple vulnerabilities in various components, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions, exploit requires specific conditions.
- 9.8 /10 CriticalCVE-2026-91098
HP HPLIP - Multiple Vulnerabilities
HP HPLIP contains multiple vulnerabilities in various components, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification, exploit requires specific conditions.