Critical CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

Critical CVEs

Newest first · severity as published by the vendor or NVD · page 130 of 166

  • 9.3 /10 Critical
    CVE-2026-89918

    Linux Kernel KVM arm64 - Logic Error

    Linux kernel KVM arm64 contains a logic error in TLB invalidation by VA caused by incorrect address range comparison that fails on address rollover, letting attackers cause failed TLB invalidation, exploit requires kernel-level access.

  • 9.3 /10 Critical
    CVE-2026-89916

    Linux Kernel KVM arm64 - Race Condition

    Linux kernel KVM arm64 contains a race condition in VNCR TLB invalidation caused by improper handling of concurrent page faults and TLB updates, letting attackers cause inconsistent memory translation, exploit requires concurrent vCPU execution.

  • 9.3 /10 Critical
    CVE-2026-89915

    Linux Kernel KVM arm64 - Authentication Bypass

    Linux kernel KVM arm64 contains a broken authentication caused by flawed VM-wide VNCR mapping counter logic, letting attackers potentially bypass TLB invalidation guarantees, exploit requires specific CPU and VM conditions.

  • 9.3 /10 Critical
    CVE-2026-89914 No auth

    Linux Kernel KVM arm64 - Memory Management Vulnerability

    Linux kernel contains a sign extension omission vulnerability in KVM arm64 decode_range_tlbi helper for range-based TLBI invalidation, letting attackers cause potential memory management issues, exploit requires specific usage of S2 invalidation.

  • 9.8 /10 Critical
    CVE-2026-89857

    Linux Kernel qla2xxx - Race Condition

    Linux kernel qla2xxx driver contains a race condition caused by missing qpair lock when sending NVMe LS reject, letting concurrent processes corrupt request ring state, leading to duplicated or dropped commands, exploit requires concurrent access to base_qpair.

  • 9.8 /10 Critical
    CVE-2026-89847 No auth

    Linux Kernel qla2xxx - Use After Free

    Linux kernel contains a use-after-free vulnerability in the qla2xxx SCSI driver caused by double completion in async IOCB timeout handling, letting attackers cause memory corruption, exploit requires triggering async IOCB timeout.

  • 9.1 /10 Critical
    CVE-2026-89846 No auth

    Linux Kernel qla2xxx - Information Disclosure

    Linux kernel scsi qla2xxx contains an information disclosure vulnerability caused by an out-of-bounds read in sense-data handling due to improper rsp_info_len validation, letting attackers leak adjacent memory, exploit requires a hostile or buggy target.

  • 9.8 /10 Critical
    CVE-2026-89788 No auth

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in ksmbd's smb2_tree_connect() caused by improper reference handling during tree connection initialization, letting attackers cause memory corruption, exploit requires concurrent session logoff race condition.

  • 9.1 /10 Critical
    CVE-2026-89786 No auth

    Linux Kernel ext4 - Out of Bounds Read

    Linux kernel ext4 contains an out-of-bounds read caused by improper bounds checking in ext4_read_inline_dir(), letting local attackers trigger slab-out-of-bounds read, exploit requires local access.

  • 9.8 /10 Critical
    CVE-2026-89783 No auth

    Linux Kernel - Out of Bounds Write

    Linux kernel contains an out-of-bounds write vulnerability in xfrm6_input_addr() due to an off-by-one error in secpath depth check, letting attackers cause memory corruption, exploit requires crafted IPv6 packets with specific headers.

  • 9.1 /10 Critical
    CVE-2026-89779 No auth

    Linux Kernel - Information Disclosure

    Linux kernel fs/ntfs3 contains an information disclosure vulnerability caused by improper validation of ef->size in extended attribute records, letting local attackers leak heap memory via crafted NTFS images, exploit requires local access.

  • 9.8 /10 Critical
    CVE-2026-89778 No auth

    Linux Kernel - Out-of-Bounds Read

    Linux kernel contains an out-of-bounds read vulnerability in isofs due to incorrect page array access on empty zisofs blocks, letting local attackers cause memory corruption via crafted ISO9660 images, exploit requires crafted ISO9660 image.

  • 9.3 /10 Critical
    CVE-2026-89775 No auth

    Linux Kernel KVM arm64 - Denial of Service

    Linux kernel KVM arm64 contains a logic error caused by improper handling of negative S1 walk levels in VNCR TLB size evaluation, letting attackers potentially cause incorrect TLB invalidation size calculation, exploit requires kernel-level access.

  • 9.1 /10 Critical
    CVE-2026-88592 No auth

    kkFileView - Server-Side Request Forgery

    kkFileView >= 4.2.0 contains a server-side request forgery caused by inconsistent URL parameter validation in the /getCorsFile endpoint, letting attackers fetch arbitrary URLs server-side, exploit requires crafted request with specific parameters.

  • 9.1 /10 Critical
    CVE-2026-86462 No auth

    Apache Airflow FAB provider - Authentication Bypass

    Apache Airflow FAB provider contains a broken authentication caused by failure to invalidate existing database-backed sessions after password change via Admin user-edit PATCH endpoint, letting attackers with existing session cookies maintain access, exploit requires attacker to have victim's session cookie.