Critical CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

Critical CVEs

Newest first · severity as published by the vendor or NVD · page 35 of 125

  • 9.8 /10 Critical
    CVE-2026-76455 No auth

    Cisco NX-OS - Broken Access Control

    Cisco NX-OS contains improper access control vulnerabilities caused by insufficient authorization checks, letting attackers gain unauthorized access, exploit requires network access.

  • 9.1 /10 Critical
    CVE-2026-76454 No auth

    Cisco License On-Prem - Unrestricted File Upload & Denial of Service

    Cisco License On-Prem contains an unrestricted file write and denial of service vulnerability caused by improper input validation and lack of authentication in the Smart Licensing Utility API, letting unauthenticated remote attackers write arbitrary files or cause DoS, exploit requires no authentication.

  • 9.8 /10 Critical
    CVE-2026-76285

    CVE-2026-76285

    Improper Adherence to Coding Standards. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.

  • 9.8 /10 Critical
    CVE-2026-76284

    CVE-2026-76284

    Improper Neutralization. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.

  • 9.8 /10 Critical
    CVE-2026-76268 PoC publicNo auth

    Splunk Enterprise - Command Injection

    Splunk Enterprise < 10.4.3 and < 10.2.7 contains a command injection caused by unauthenticated access to Patroni REST API on search head cluster members, letting unauthenticated attackers execute arbitrary OS commands remotely, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-62253 No auth

    Homer - Authentication Bypass

    Homer < 11.0.283 contains a broken authentication caused by JWT middleware functions allowing empty jwtSecret, letting attackers access protected API endpoints without authentication, exploit requires default configuration with empty jwtSecret.

  • 9.8 /10 Critical
    CVE-2026-62252

    Homer - Authentication Bypass

    Homer < 11.0.283 contains a broken authentication caused by default admin account with fixed password and no forced password change, letting attackers gain full administrative access, exploit requires access to login endpoint.

  • 9.1 /10 Critical
    CVE-2026-62176

    PraisonAI - Command Injection

    PraisonAI < 4.6.78 contains a command injection caused by direct interpolation of the agents_file parameter into an f-string executed via subprocess.Popen, letting attackers inject arbitrary Python code, exploit requires attacker control of agents_file input.

  • 9.3 /10 Critical
    CVE-2026-59346 PoC publicNo auth

    VMware Workstation & Fusion - Integer Overflow

    VMware Workstation and Fusion 25H2 and 26H1 contain an integer overflow caused by improper handling in VMXNET3 virtual network adapter, letting local attackers with admin privileges on a VM execute code on the host, exploit requires local admin on VM.

  • 9.1 /10 Critical
    CVE-2026-20328 No auth

    Cisco License On-Prem - Authentication Bypass

    Cisco License On-Prem contains a broken authentication caused by improper checks during the password reset process, letting unauthenticated remote attackers reset arbitrary user passwords and gain unauthorized access, exploit requires sending a crafted request to the web interface.

  • 9.3 /10 Critical
    CVE-2026-19572 No auth

    FlexNet Publisher lmadmin - Authentication Bypass

    FlexNet Publisher lmadmin contains an authentication bypass caused by a hardcoded SOAP handler, letting unauthenticated attackers obtain privileged administrator sessions without valid credentials.

  • 9.3 /10 Critical
    CVE-2026-19386 Auth required

    ASUS Router - Buffer Overflow

    ASUS Router contains a stack-based buffer overflow caused by crafted configuration file upload exceeding buffer size, letting authenticated nearby attackers execute arbitrary code.

  • 9.3 /10 Critical
    CVE-2026-14911 No auth

    ASUS Router - Stored XSS

    ASUS router modules contain a stored XSS caused by improper neutralization of input during web page generation, letting remote attackers read DOM information, modify settings, and cause denial of service when an authenticated user visits a crafted URL.

  • 9.4 /10 Critical
    CVE-2026-107282 No auth

    AsyncHttpClient - Information Disclosure

    AsyncHttpClient < 3.0.13 and < 2.16.1 contains a cross-host request replay vulnerability caused by improper update of target request and proxy context, letting attackers cause sensitive data leakage to unintended hosts, exploit requires crafted request triggering replay.

  • 9.4 /10 Critical
    CVE-2026-107206 No auth

    LMCache - Authentication Bypass

    LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server, letting remote unauthenticated attackers access management endpoints and manipulate cache and configuration.