Critical CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

Critical CVEs

Newest first · severity as published by the vendor or NVD · page 30 of 166

  • 9.1 /10 Critical
    CVE-2026-9814 Auth required

    TOTOLINK X2000R - Command Injection

    TOTOLINK X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 contains a command injection caused by improper input handling in boa formWizard newPass functionality, letting authenticated attackers execute arbitrary code remotely.

  • 9.1 /10 Critical
    CVE-2026-9660 Auth required

    TOTOLINK X2000R - Remote Code Execution

    TOTOLINK X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 contains a stack-based buffer overflow caused by improper handling of vpnPassword parameter in formFilter functionality, letting authenticated attackers execute arbitrary code remotely, exploit requires authentication.

  • 9.1 /10 Critical
    CVE-2026-9659 Auth required

    TOTOLINK X2000R - Remote Code Execution

    TOTOLINK X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 contains a stack-based buffer overflow caused by improper handling of the vpnUser parameter in formFilter functionality, letting authenticated attackers execute arbitrary code remotely, exploit requires authentication.

  • 9.3 /10 Critical
    CVE-2026-9589 Auth required

    Unblu Spark - Broken Access Control

    Unblu inc. Unblu Spark 7.0 through 8.36.1-hotfix.0 contains a broken access control vulnerability caused by missing authorization checks in configuration cascade operations, letting authenticated remote attackers read and modify unauthorized configuration properties, exploit requires authenticated session.

  • 9.3 /10 Critical
    CVE-2026-93475 No auth

    NetX Secure - Buffer Overflow

    NetX Secure contains a buffer overflow caused by accepting RSA public keys larger than NX_CRYPTO_MAX_RSA_MODULUS_SIZE during X.509 certificate verification, letting remote attackers trigger out-of-bounds writes pre-authentication.

  • 9.8 /10 Critical
    CVE-2026-92559 No auth

    IBM App Connect Enterprise - Information Disclosure

    IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 contains an information disclosure vulnerability caused by binding to an unrestricted IP address, letting remote attackers obtain sensitive information, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-91665 No auth

    Oracle Essbase - Remote Code Execution

    Oracle Essbase 21.8.3.0.0 contains a remote code execution caused by a security vulnerability, letting unauthenticated attackers with network access fully compromise the system, exploit requires network access via TCP.

  • 9.9 /10 Critical
    CVE-2026-91663 Auth required

    Oracle Essbase - Remote Code Execution

    Oracle Essbase 21.8.3.0.0 contains a remote code execution caused by security flaw in T3 and IIOP network access, letting low privileged attackers fully compromise the system, exploit requires network access with low privileges.

  • 9.9 /10 Critical
    CVE-2026-91658 Auth required

    Oracle Essbase - Remote Code Execution

    Oracle Essbase 21.8.3.0.0 contains a remote code execution caused by a security vulnerability, letting low privileged attackers with network access via HTTP take over the system, exploit requires network access with low privileges.

  • 9.1 /10 Critical
    CVE-2026-91656 Auth required

    Oracle Essbase - Broken Access Control

    Oracle Essbase 21.8.3.0.0 contains an unauthorized access vulnerability caused by flaws in Federated Partitions component, letting low privileged attackers with network HTTP access compromise data confidentiality, integrity, and availability.

  • 9.1 /10 Critical
    CVE-2026-91655 Auth required

    Oracle Essbase - Authentication Bypass

    Oracle Essbase 21.8.3.0.0 contains an authentication bypass caused by security flaws, letting low privileged attackers with network HTTP access gain unauthorized data access and cause partial denial of service, exploit requires network access with low privileges.

  • 9.3 /10 Critical
    CVE-2026-91644 No auth

    Oracle Essbase - Authentication Bypass

    Oracle Essbase 21.8.3.0.0 contains an authentication bypass caused by a security flaw, letting unauthenticated attackers with network access via HTTP gain unauthorized access and modify critical data, exploit requires network access.

  • 9.9 /10 Critical
    CVE-2026-91638 Auth required

    Oracle Essbase - Authentication Bypass

    Oracle Essbase 21.8.3.0.0 contains a security vulnerability allowing low privileged attackers with network access via HTTP to compromise the system, potentially leading to full takeover, exploit requires network access.

  • 9.9 /10 Critical
    CVE-2026-91637 Auth required

    Oracle Essbase - Remote Code Execution

    Oracle Essbase 21.8.3.0.0 contains a remote code execution caused by a security vulnerability, letting low privileged attackers with network access via HTTP take over the system, exploit requires network access with low privileges.

  • 9.1 /10 Critical
    CVE-2026-91624 No auth

    Oracle Agile Product Lifecycle Management for Process - Broken Access Control

    Oracle Agile Product Lifecycle Management for Process 6.2.4 contains a broken access control vulnerability in Product Quality Management, letting unauthenticated attackers with HTTP network access create, delete, or modify critical data.