Critical CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

Critical CVEs

Newest first · severity as published by the vendor or NVD · page 132 of 166

  • 9.8 /10 Critical
    CVE-2026-68536 No auth

    Apache MyFaces Core - Server-Side Request Forgery & Local File Inclusion

    Apache MyFaces Core contains a server-side request forgery and local file inclusion caused by improper input validation, letting attackers make arbitrary server requests or include local files, exploit requires crafted requests.

  • 9.1 /10 Critical
    CVE-2026-61594 No auth

    djust - Authentication Bypass

    djust < 1.0.7 contains an authentication bypass caused by WebSocket transport not enforcing Django's standard authorization checks, letting anonymous or under-privileged clients access and dispatch admin views, exploit requires WebSocket access.

  • 9.8 /10 Critical
    CVE-2026-51990 CISA KEVPoC publicNo auth

    Sogou Sogou Input Method - Remote Code Execution

    Sogou Sogou Input Method < 16.3.0.3498 contains a remote code execution caused by vulnerability in biz_helper.exe component, letting remote attackers execute arbitrary code, exploit requires no special conditions.

  • 9.8 /10 Critical
    CVE-2026-27565 No auth

    Unspecified Product - Unrestricted File Upload

    An unspecified product contains an unrestricted file upload vulnerability caused by allowing unauthenticated remote attackers to upload malicious IODD files, letting attackers execute persistent shell scripts with root privileges, exploit requires no authentication.

  • 9.8 /10 Critical
    CVE-2026-27546 No auth

    Unknown - Authentication Bypass

    Unknown product contains an authentication bypass caused by flaw in _account_log function, letting unauthenticated remote attackers log in as admin, exploit requires no special conditions.

  • 9.1 /10 Critical
    CVE-2026-20341 Auth required

    Cisco Secure FMC Software - Authentication Bypass

    Cisco Secure FMC Software contains an insecure deserialization vulnerability in the sftunnel inter-device communication protocol, letting authenticated remote attackers gain root privileges by sending crafted RPCs, exploit requires valid administrative credentials.

  • 9.9 /10 Critical
    CVE-2026-20332

    Cisco Secure Firewall - Broken Access Control

    Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software contain improper access control vulnerabilities caused by insufficient authorization checks, letting attackers bypass restrictions, exploit requires unspecified conditions.

  • 9.6 /10 Critical
    CVE-2026-20331

    CVE-2026-20331

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. &nbsp; The vulnerabilities tracked by CVE-2026-20331 are related to the failure of protection mechanisms issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-693.

  • 9.9 /10 Critical
    CVE-2026-20330

    CVE-2026-20330

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. &nbsp; The vulnerabilities tracked by CVE-2026-20330 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-707.

  • 9.9 /10 Critical
    CVE-2026-20329 PoC publicAuth required

    Cisco Secure Firewall - Denial of Service

    Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software contain an improper handling of exceptional conditions vulnerability (CWE-703), letting attackers cause potential denial of service or unexpected behavior, exploit requires triggering exceptional conditions.

  • 9.8 /10 Critical
    CVE-2026-20326

    Cisco Nexus Dashboard - Authentication Bypass

    Cisco Nexus Dashboard contains missing authentication for critical functions caused by lack of proper access controls, letting attackers perform unauthorized actions, exploit requires access to the system.

  • 9.9 /10 Critical
    CVE-2026-20325 Auth required

    Cisco Nexus Dashboard - Command Injection

    Cisco Nexus Dashboard contains a command injection vulnerability caused by improper neutralization of special elements in command issuance, letting attackers execute arbitrary commands, exploit requires crafted input.

  • 9.9 /10 Critical
    CVE-2026-20324 Auth required

    Cisco Secure Firewall Management Center - Command Injection

    Cisco Secure Firewall Management Center contains a command injection caused by improper permissions in sftunnel inter-device communication protocol, letting authenticated remote attackers execute arbitrary commands as root, exploit requires valid user credentials.

  • 9.9 /10 Critical
    CVE-2026-20322 Auth required

    Cisco Nexus Dashboard - Broken Access Control

    Cisco Nexus Dashboard contains improper access control vulnerabilities caused by insufficient authorization checks, letting attackers gain unauthorized access, exploit requires network access.

  • 9.9 /10 Critical
    CVE-2026-20307 Auth required

    Cisco ISE - Remote Code Execution & Privilege Escalation

    Cisco ISE contains an insecure deserialization vulnerability caused by processing user-supplied Java byte streams in the web-based management interface, letting authenticated remote attackers execute arbitrary commands and elevate privileges, exploit requires low-privileged administrative credentials.