Critical CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

Critical CVEs

Newest first · severity as published by the vendor or NVD · page 151 of 166

  • 9.8 /10 Critical
    CVE-2026-89712

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in NFSD nfsd4_ssc_expire_umount caused by improper handling of list iteration after dropping nfsd_ssc_lock, letting attackers cause denial of service by crashing the kernel, exploit requires concurrent NFS RPC threads.

  • 9.8 /10 Critical
    CVE-2026-89708 No auth

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in nfsd caused by improper handling of cl_cb_session during session teardown, letting attackers cause memory corruption or denial of service, exploit requires triggering session destruction with inflight callbacks.

  • 9.8 /10 Critical
    CVE-2026-89703

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in nfsd4_drop_revoked_stid due to missing SC_STATUS_FREED flag setting for admin-revoked delegations, letting attackers cause memory corruption, exploit requires local access.

  • 9.8 /10 Critical
    CVE-2026-89702 No auth

    Linux Kernel - Out of Bounds Read/Write

    Linux kernel contains a buffer overflow caused by mismatched sizing of server sockaddr slot in nfsd_fh_verify tracepoints, letting attackers cause out-of-bounds memory writes, exploit requires NFS/UDP usage.

  • 9.1 /10 Critical
    CVE-2026-89697 No auth

    Linux Kernel - Broken Access Control

    Linux kernel contains a broken access control vulnerability caused by missing fh_want_write() call in nfsd_proc_setattr() during early-verified SETATTR, letting attackers cause improper mount write reference handling, exploit requires network access to NFS service.

  • 9.8 /10 Critical
    CVE-2026-89689 No auth

    Linux Kernel nfsd - Use After Free

    Linux kernel nfsd contains a use-after-free vulnerability caused by improper freeing of session slots in nfsd4_sequence(), letting attackers cause memory corruption and potential denial of service, exploit requires crafted NFSv4 client requests.

  • 9.8 /10 Critical
    CVE-2026-89688 No auth

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability caused by incorrect reference counting in nfsd4_cstate_assign_replay() during seqid_op replay retry, letting attackers cause memory corruption or denial of service, exploit requires attacker to trigger specific NFSv4 operations.

  • 9.8 /10 Critical
    CVE-2026-89686 No auth

    Linux Kernel - Denial of Service

    Linux kernel contains a race condition in nfsd4_alloc_layout_stateid caused by unsynchronized access to fi_deleg_file during delegation revoke, letting NFS clients trigger a kernel BUG, exploit requires concurrent NFS clients with delegation and recall.

  • 9.8 /10 Critical
    CVE-2026-89681 No auth

    Linux Kernel - Race Condition

    Linux kernel contains a race condition in nfsd layout fence worker caused by double-reference of sc_count in lm_breaker_timedout, letting attackers cause resource leaks, exploit requires local access.

  • 9.8 /10 Critical
    CVE-2026-89677

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in nfsd4_create_file caused by improper handling of dentry in fh_compose, letting attackers cause memory corruption, exploit requires NFS exported filesystem with specific filehandle conditions.

  • 9.8 /10 Critical
    CVE-2026-89676 No auth

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in nfsd async COPY caused by stale s2s_cp_stateids IDR entry pointing to transient request memory, letting attackers cause memory corruption or denial of service, exploit requires triggering async COPY operations.

  • 9.8 /10 Critical
    CVE-2026-89675 No auth

    Linux kernel nfsd - Use After Free

    Linux kernel nfsd contains a use-after-free vulnerability caused by race conditions in async copy cancel and shutdown operations, letting local attackers cause memory corruption or kernel crashes, exploit requires concurrent async copy operations.

  • 9.8 /10 Critical
    CVE-2026-89674 No auth

    Linux Kernel - Buffer Overflow & Information Disclosure

    Linux kernel contains a buffer overflow and information disclosure vulnerability caused by incorrect XDR length calculation in nfsd4_ff_encode_layoutget, letting remote attackers cause out-of-bounds write or leak uninitialized kernel memory, exploit requires crafted NFSv4 requests.

  • 9.1 /10 Critical
    CVE-2026-89672 No auth

    Linux Kernel NFSd - Broken Access Control

    Linux kernel NFS server (nfsd) contains a broken access control vulnerability in NFSACL v2 SETACL path caused by improper handling of ACL mask bits, letting attackers silently remove ACLs, exploit requires crafted NFS SETACL requests.

  • 9.1 /10 Critical
    CVE-2026-89671 No auth

    Linux Kernel - Broken Access Control

    Linux kernel contains a broken access control vulnerability in nfsd3_proc_setacl where ACL mask bits are not checked before setting ACLs, letting remote attackers unintentionally remove ACLs, exploit requires crafted NFSv3 SETACL request.