Critical CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 13360
- Critical
- 2486
- CISA KEV
- 125
- Public PoC
- 437
Most common types
- Broken Access Control 1691
- Remote Code Execution 1609
- Privilege Escalation 1307
- Authentication Bypass 1121
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026
Critical CVEs
Newest first · severity as published by the vendor or NVD · page 129 of 166
- 9.8 /10 CriticalCVE-2026-91097 PoC public
HP HPLIP - Multiple Vulnerabilities
HP HPLIP contains multiple vulnerabilities in various components, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions, exploit requires specific conditions.
- 9.8 /10 CriticalCVE-2026-90999 No auth
Sentry Seer - Remote Code Execution
Sentry Seer contains a trust-boundary violation caused by unauthenticated attacker-controlled telemetry being executed by an agent in a privileged automation environment, letting external attackers execute code without account access.
- 9.3 /10 CriticalCVE-2026-90049 No auth
Linux Kernel - Data Corruption & Denial of Service
Linux kernel contains a vulnerability in skb_zerocopy() where skb_tx_error() is incorrectly called on the source skb, causing destructive operations and improper buffer ownership handling, letting attackers cause data corruption or denial of service, exploit requires crafted packet triggering skb_orphan_frags() failure.
- 9.8 /10 CriticalCVE-2026-90048 No auth
Linux Kernel - Out of Bounds Read/Write
Linux kernel contains a slab-out-of-bounds write in ni_create_attr_list() caused by improper buffer sizing when processing NTFS attributes, letting attackers with access to crafted loop-mounted NTFS images cause heap buffer overflow, exploit requires mounting a crafted NTFS image and file attribute modification.
- 9.8 /10 CriticalCVE-2026-90042 No auth
Linux kernel Ceph - Denial of Service
Linux kernel contains a memory handling vulnerability in Ceph where vmalloc() buffers are improperly decrypted in fscrypt subsystem, causing kernel oops on non-x86 platforms, exploit requires crafted Ceph messages in vmalloc buffers.
- 9.8 /10 CriticalCVE-2026-90038
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in NFSD during export state revocation caused by improper client reference handling in nfsd4_revoke_export_states(), letting attackers cause memory corruption, exploit requires race condition during export removal.
- 9.8 /10 CriticalCVE-2026-90037
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in NFSD during close_lru reaping caused by improper client pointer handling, letting attackers cause memory corruption or denial of service, exploit requires concurrent client expiration.
- 9.8 /10 CriticalCVE-2026-90036 No auth
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in NFSD caused by improper client reference handling during blocked-lock reaping, letting attackers cause memory corruption, exploit requires triggering blocked-lock reaping.
- 9.8 /10 CriticalCVE-2026-90012 No auth
Linux Kernel spi - Denial of Service & Privilege Escalation
Linux kernel spi subsystem contains a buffer management vulnerability caused by improper DMA mapping ownership handling in __spi_map_msg(), letting attackers trigger kernel oops or memory corruption, exploit requires kernel-level access.
- 9.1 /10 CriticalCVE-2026-90011 No auth
Linux Kernel scsi target iscsi - Out of Bounds Read
Linux kernel scsi target iscsi contains a buffer overflow caused by insufficient allocation for a NUL terminator in login payload buffer, letting unauthenticated initiators potentially read adjacent memory, exploit requires iscsi portal configured for CHAP authentication.
- 9.8 /10 CriticalCVE-2026-89990
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in ceph_mds_check_access() caused by traversing a freed array without holding the mutex, letting local attackers cause kernel crashes or memory corruption, exploit requires concurrent session reopen.
- 9.8 /10 CriticalCVE-2026-89972
Linux Kernel - Use After Free
Linux kernel contains a use-after-free caused by missing SRCU grace period in nvme_alloc_ns() error path, letting concurrent SRCU readers access freed namespace structures, exploit requires concurrent access to NVMe multipath namespace.
- 9.8 /10 CriticalCVE-2026-89970
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in nvmet-auth caused by asynchronous cancellation of delayed work during submission queue teardown, letting attackers cause memory corruption or system instability, exploit requires access to NVMe target queues.
- 9.8 /10 CriticalCVE-2026-89969 No auth
Linux Kernel nvmet-tcp - Out-of-Bounds Write
Linux kernel nvmet-tcp contains an out-of-bounds write vulnerability caused by improper bounds checking when receiving an over-long PDU, letting remote unauthenticated attackers corrupt adjacent kernel memory, exploit requires sending crafted PDU.
- 9.3 /10 CriticalCVE-2026-89930 No auth
Linux Kernel KVM - Broken Access Control
Linux kernel KVM nVMX contains a broken access control vulnerability caused by missing local TLB flushes on failed nested VM-Enter, letting attackers cause stale TLB entries leading to potential privilege escalation, exploit requires nested virtualization environment.