Critical CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 13360
- Critical
- 2486
- CISA KEV
- 125
- Public PoC
- 437
Most common types
- Broken Access Control 1691
- Remote Code Execution 1609
- Privilege Escalation 1307
- Authentication Bypass 1121
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026
Critical CVEs
Newest first · severity as published by the vendor or NVD · page 23 of 166
- 9.3 /10 CriticalCVE-2025-30054 Auth required
CGM CLININET - Privilege Escalation
CGM CLININET <= 2026.MS3 contains a local privilege escalation caused by incorrect permissions on scripts and configuration files in the HL7 message processing service, letting attackers with uhcapache privileges execute code as root.
- 9.4 /10 CriticalCVE-2025-30050
CGM CLININET - Command Injection
CGM CLININET contains a code injection caused by dynamic import of modules specified via query parameter in RunCGI.pm, letting attackers from adjacent network execute arbitrary code with root privileges, exploit requires network adjacency.
- 9.4 /10 CriticalCVE-2025-30047
CGM CLININET - Remote Code Execution
CGM CLININET contains a remote code execution caused by deserialization of untrusted data in the HTTP-based API used by the administrative module, letting attackers on the same local network execute arbitrary code with root privileges, exploit requires local network access.
- 9.0 /10 CriticalCVE-2025-30046 No auth
CGM CLININET - Remote Code Execution
CGM CLININET application server <= 2026.MS3 contains a remote code execution caused by HL7 communication processes running with root privileges processing untrusted data, letting adjacent network attackers execute code as root, exploit requires network access.
- 10.0 /10 CriticalCVE-2026-97785 No auth
AAD App Proxy - Authentication Bypass
AAD App Proxy contains an improper authentication vulnerability allowing unauthorized attackers to elevate privileges over a network, exploit requires network access.
- 9.5 /10 CriticalCVE-2026-97631 No auth
EDK2 BIOS - Buffer Overflow
EDK2 BIOS contains a buffer overflow caused by out-of-bounds write and incorrect buffer size calculation, letting remote attackers execute arbitrary code, exploit requires remote access.
- 9.1 /10 CriticalCVE-2026-96355 No auth
Drupal Webform - Template Injection
Drupal Webform <= 6.2.12 and 6.3.0 to 6.3.1 contains a template injection caused by improper neutralization of special elements in the template engine, letting attackers inject code remotely, exploit requires crafted input.
- 10.0 /10 CriticalCVE-2026-83938 No auth
Azure Kubernetes Configuration Service - Authentication Bypass
Azure Kubernetes Configuration Service contains a broken authentication caused by missing authentication for critical functions, letting unauthorized attackers elevate privileges over a network, exploit requires network access.
- 9.3 /10 CriticalCVE-2026-79876
CVE-2026-79876
The vendor has not published a description for this vulnerability. Its CVSS v3.1 base assessment scores it for exploitation from an adjacent network; confidentiality is affected at a high level, availability at a high level. See the vendor advisory in the references for details.
- 9.3 /10 CriticalCVE-2026-79875
CVE-2026-79875
The vendor has not published a description for this vulnerability. Its CVSS v3.1 base assessment scores it for exploitation from an adjacent network; confidentiality is affected at a high level, integrity at a high level. See the vendor advisory in the references for details.
- 9.3 /10 CriticalCVE-2026-79874
CVE-2026-79874
The vendor has not published a description for this vulnerability. Its CVSS v3.1 base assessment scores it for exploitation from an adjacent network; confidentiality is affected at a high level, integrity at a high level. See the vendor advisory in the references for details.
- 9.3 /10 CriticalCVE-2026-79873
CVE-2026-79873
The vendor has not published a description for this vulnerability. Its CVSS v3.1 base assessment scores it for exploitation from an adjacent network; confidentiality is affected at a high level, integrity at a high level. See the vendor advisory in the references for details.
- 9.4 /10 CriticalCVE-2026-79872
CVE-2026-79872
The vendor has not published a description for this vulnerability. Its CVSS v3.1 base assessment scores it for exploitation over a network; confidentiality is affected at a high level, integrity at a high level, availability at a low level. See the vendor advisory in the references for details.
- 9.6 /10 CriticalCVE-2026-79871
CVE-2026-79871
The vendor has not published a description for this vulnerability. Its CVSS v3.1 base assessment scores it for exploitation from an adjacent network; confidentiality is affected at a high level, integrity at a high level, availability at a high level. See the vendor advisory in the references for details.
- 9.6 /10 CriticalCVE-2026-79870
CVE-2026-79870
The vendor has not published a description for this vulnerability. Its CVSS v3.1 base assessment scores it for exploitation from an adjacent network; confidentiality is affected at a high level, integrity at a high level, availability at a high level. See the vendor advisory in the references for details.