Critical CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

Critical CVEs

Newest first · severity as published by the vendor or NVD · page 21 of 125

  • 10.0 /10 Critical
    CVE-2026-108918 No auth

    Edimax BR-6208AC - Command Injection

    Edimax BR-6208AC 1.32 contains a command injection caused by manipulation of the "readE2P" argument in /goform/formWlanMP, letting remote attackers execute arbitrary commands, exploit requires no special privileges.

  • 10.0 /10 Critical
    CVE-2026-108917 No auth

    Edimax BR-6208AC - Command Injection

    Edimax BR-6208AC 1.32 contains a command injection caused by manipulation of the "tftpsIP" argument in /goform/formAutoFWupgrade, letting remote attackers execute arbitrary commands, exploit requires crafted request.

  • 9.9 /10 Critical
    CVE-2026-108915 Auth required

    Edimax BR-6208AC - Buffer Overflow

    Edimax BR-6208AC 1.32 contains a buffer overflow caused by manipulation of the "ateBW" argument in /goform/formWlanMP, letting remote attackers cause memory corruption, exploit requires no special privileges.

  • 9.9 /10 Critical
    CVE-2026-108914 Auth required

    Edimax BR-6208AC - Buffer Overflow

    Edimax BR-6208AC 1.32 contains a buffer overflow caused by manipulation of the "ifname" argument in /goform/formWlSiteSurvey, letting remote attackers cause memory corruption, exploit requires crafted request.

  • 10.0 /10 Critical
    CVE-2026-108907 No auth

    Netcore NR268 - Authentication Bypass

    Netcore NR268 1.7.121109 contains an authentication bypass caused by improper authentication in user_ok function of CGI Execution, letting remote attackers bypass authentication, exploit requires no special conditions.

  • 9.9 /10 Critical
    CVE-2026-108896 Auth required

    Linksys E1700 - Command Injection

    Linksys E1700 1.0.0.4.003 contains a command injection caused by manipulation of _6rd_prefix/_6rd_prefix_len arguments in /goform/setLinksysIpv6, letting remote attackers execute OS commands, exploit requires no special privileges.

  • 9.9 /10 Critical
    CVE-2026-108895 Auth required

    Linksys E1700 - Command Injection

    Linksys E1700 1.0.0.4.003 contains a command injection caused by manipulation of the MAC_addr argument in /goform/setDMZ, letting remote attackers execute arbitrary OS commands, exploit requires no special privileges.

  • 9.9 /10 Critical
    CVE-2026-108894 Auth required

    Linksys E1700 - Command Injection

    Linksys E1700 1.0.0.4.003 contains a command injection caused by manipulation of staticRoute_IP_setting, staticRoute_Netmask_setting, staticRoute_Gateway_setting, or staticRoute_Metric_setting arguments in /goform/addStaticRoute, letting remote attackers execute arbitrary OS commands, exploit requires no special privileges.

  • 9.9 /10 Critical
    CVE-2026-108893 Auth required

    Linksys E1700 - Buffer Overflow

    Linksys E1700 <= 1.0.0.4.003 contains a stack-based buffer overflow caused by manipulation of the "vlan_set" argument in /goform/setVlan, letting remote attackers execute arbitrary code, exploit requires crafted request.

  • 10.0 /10 Critical
    CVE-2026-108892 No auth

    Linksys E1700 - Buffer Overflow

    Linksys E1700 1.0.0.4.003 contains a stack-based buffer overflow caused by manipulation of the argument newap_text_%d in ssid1MACFilter component, letting remote attackers cause memory corruption, exploit requires crafted request.

  • 10.0 /10 Critical
    CVE-2026-108804 No auth

    TRENDnet TEW-751DR/TEW-752DRU/TEW733GR - Command Injection

    TRENDnet TEW-751DR, TEW-752DRU, and TEW733GR 1.03B01/1.03B03 contain a command injection caused by manipulation of the "service" argument in pigwidgeon.cgi fwrite function of the Web Management Backend, letting remote attackers execute OS commands, exploit requires no special privileges.

  • 9.1 /10 Critical
    CVE-2026-108362

    Privasys Remote Attestation TLS Clients - Authentication Bypass

    Privasys Remote Attestation TLS Clients < 0.11.0 contains an authentication bypass caused by acceptance of TEE attestation evidence without explicit platform identity authorization, letting network attackers impersonate attested TLS endpoints, exploit requires forged evidence or extracted attestation secrets.

  • 9.8 /10 Critical
    CVE-2025-71429 No auth

    GPT-SoVITS - Command Injection

    GPT-SoVITS through 20250606v2pro contains a command injection caused by improper sanitization of output folder paths in tools/uvr5/vr.py, letting unauthenticated attackers execute OS commands via UVR5 WebUI output folder inputs.

  • 9.1 /10 Critical
    CVE-2026-86717 No auth

    Insurify WordPress plugin - Broken Access Control

    Insurify WordPress plugin through 1.0 contains a broken access control caused by missing authorization and nonce checks on an AJAX action, letting unauthenticated attackers delete arbitrary WordPress options, exploit requires no authentication.

  • 9.1 /10 Critical
    CVE-2026-86706 No auth

    Quick quotes WordPress plugin - Broken Access Control

    Quick quotes WordPress plugin through 1.0.0 contains a broken access control vulnerability caused by lack of capability or nonce checks in an AJAX action, letting unauthenticated attackers alter site settings and cause denial of service.