Critical CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 13360
- Critical
- 2486
- CISA KEV
- 125
- Public PoC
- 437
Most common types
- Broken Access Control 1691
- Remote Code Execution 1609
- Privilege Escalation 1307
- Authentication Bypass 1121
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026
Critical CVEs
Newest first · severity as published by the vendor or NVD · page 47 of 166
- 9.8 /10 CriticalCVE-2026-55573 No auth
e107 - Remote Code Execution
e107 < 2.3.7 contains an insecure deserialization caused by unserialize() of attacker-controlled previous_steps POST parameter in install.php, letting unauthenticated attackers execute arbitrary PHP functions with web server privileges, exploit requires access to install.php.
- 10.0 /10 CriticalCVE-2026-55572 No auth
e107 - SQL Injection
e107 < 2.3.7 contains a SQL injection caused by unsanitized username interpolation in alt_auth plugin's otherdb and e107db authentication backends, letting unauthenticated attackers expose or modify database data, exploit requires alt_auth with live external DB connection.
- 9.8 /10 CriticalCVE-2026-33796 No auth
Juniper Networks Junos OS - Remote Code Execution & Privilege Escalation
Juniper Networks Junos OS and Junos OS Evolved contain a stack-based buffer overflow caused by improper handling in the routing protocol daemon (rpd) during BMP route monitoring, letting configured external BGP neighbors execute arbitrary commands with root privileges, exploit requires configured external BGP neighbor.
- 9.8 /10 CriticalCVE-2026-33792 No auth
Juniper Networks Junos OS - Buffer Overflow
Juniper Networks Junos OS on SRX Series contains a stack-based buffer overflow caused by improper handling of crafted packets in the srxpfe process on GRE tunnels, letting unauthenticated network attackers execute code as root or cause denial of service.
- 9.8 /10 CriticalCVE-2026-33789 No auth
Juniper Networks Junos OS - Buffer Overflow
Juniper Networks Junos OS and Junos OS Evolved contain a stack-based buffer overflow caused by crafted BGP route updates in the routing protocol daemon (rpd) when BGP Monitoring Protocol (BMP) is enabled, letting unauthenticated BGP peers cause denial of service and potential root-level command execution, exploit requires BMP enabled.
- 9.8 /10 CriticalCVE-2026-16741 No auth
TR7 Cyber Defense Inc. TR7 ASP - OS Command Injection
TR7 Cyber Defense Inc. TR7 ASP on virtual and physical appliances from 1.0.40.236 < 1.0.1554.2331 and 1.6.42.239 < 1.6.1554.2331 contains an OS command injection caused by improper neutralization of special elements in OS commands, letting attackers execute arbitrary commands remotely, exploit requires network access.
- 9.8 /10 CriticalCVE-2026-16740 No auth
TR7 Cyber Defense Inc. TR7 ASP - OS Command Injection
TR7 Cyber Defense Inc. TR7 ASP on virtual and physical appliances from 1.0.40.236 < 1.0.1554.2331 and 1.6.42.239 < 1.6.1554.2331 contains an OS command injection caused by missing authentication for critical functions, letting attackers execute arbitrary OS commands remotely, exploit requires no authentication.
- 9.2 /10 CriticalCVE-2026-14851 No auth
Customer Invoicing Web Application - Broken Access Control
A customer invoicing web application contains a broken access control vulnerability caused by lack of authorization checks on PDF invoice endpoints and publicly accessible URLs, letting attackers access confidential PII and financial data without authorization.
- 9.1 /10 CriticalCVE-2026-110862 No auth
Better Auth - Authentication Bypass
Better Auth > 1.4.0-beta.18 < 1.7.7 contains an authentication bypass caused by reuse of OAuth state values as Magic Link tokens, letting unauthenticated attackers sign in as other users, exploit requires crafted OAuth sign-in.
- 9.8 /10 CriticalCVE-2026-110650 No auth
thumbnail Python package - Command Injection
thumbnail Python package through 1.5 contains a command injection caused by unsanitized file paths in generate_thumbnail(), letting attackers execute OS commands with Python process privileges, exploit requires attacker control of file names.
- 9.8 /10 CriticalCVE-2026-110649 No auth
Stills - Command Injection
Stills before 25.24.2 contains a command injection caused by crafted media file paths with shell metacharacters, letting attackers execute OS commands with Node.js process privileges, exploit requires crafted media file names.
- 9.8 /10 CriticalCVE-2026-110645 No auth
Video-stitch - Command Injection
Video-stitch < 2.0.0-beta.1 contains a command injection caused by unquoted file names interpolated into shell-executed ffmpeg commands, letting attackers execute OS commands with Node.js process privileges, exploit requires attacker to influence file names.
- 9.8 /10 CriticalCVE-2026-110644 No auth
nodejs-whisper - Command Injection
nodejs-whisper through 0.3.1 contains a command injection caused by improper sanitization of audio file paths in convertToWavType(), letting attackers execute OS commands with Node.js process privileges by supplying crafted file names.
- 9.8 /10 CriticalCVE-2026-110643 No auth
transcribe2texts - Command Injection
transcribe2texts through 1.0.6 contains a command injection caused by unescaped audioPath values in transcribeAudio(), letting attackers execute OS commands with Node.js process privileges, exploit requires crafted audioPath input.
- 9.8 /10 CriticalCVE-2026-110640 No auth
Whisper-node - Command Injection
Whisper-node <= 1.1.1 contains a command injection caused by improper sanitization of filePath or whisperOptions.language in whisper(), letting attackers execute OS commands with Node.js process privileges, exploit requires crafted input.