Critical CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

Critical CVEs

Newest first · severity as published by the vendor or NVD · page 50 of 166

  • 9.8 /10 Critical
    CVE-2026-101990 No auth

    Juniper Networks Junos OS - Buffer Overflow

    Juniper Networks Junos OS and Junos OS Evolved contain a stack-based buffer overflow caused by processing flow-spec updates in the routing protocol daemon (rpd), letting remote configured BGP peers cause crashes or remote code execution, exploit requires a configured BGP peer.

  • 9.8 /10 Critical
    CVE-2026-101986 No auth

    Juniper Networks Junos OS - Authentication Bypass

    Juniper Networks Junos OS and Junos OS Evolved contain an improper authentication vulnerability in J-Web, caused by insufficient authentication checks, letting unauthenticated network attackers bypass authentication and execute CGI content with elevated privileges via crafted HTTP requests.

  • 9.8 /10 Critical
    CVE-2026-101983 No auth

    Juniper Networks Junos OS - Remote Code Execution & Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain a stack-based buffer overflow in the httpd process, letting unauthenticated network attackers cause remote code execution and denial of service, exploit requires J-Web virtual-domain configuration.

  • 9.8 /10 Critical
    CVE-2026-101982 No auth

    Juniper Networks Junos OS - Buffer Overflow

    Juniper Networks Junos OS and Junos OS Evolved contain a stack-based buffer overflow caused by protocol-valid route advertisements for an EVPN-VPWS service in the routing protocol daemon (rpd), letting configured BGP/EVPN peers execute root code or crash rpd, exploit requires configured BGP/EVPN peer.

  • 9.8 /10 Critical
    CVE-2026-101980 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS kernel with Extended Echo configured contains an integer underflow caused by improper input handling, letting unauthenticated network attackers cause denial of service via kernel crash, exploit requires Extended Echo configuration.

  • 9.8 /10 Critical
    CVE-2026-101956 No auth

    Juniper Networks Junos OS - Authentication Bypass

    Juniper Networks Junos OS contains an improper authentication vulnerability in the J-Web web management component, letting unauthenticated remote attackers execute arbitrary Junos commands with root privileges via the exposed web interface.

  • 9.8 /10 Critical
    CVE-2026-101954 No auth

    Juniper Networks Junos OS - Authentication Bypass

    Juniper Networks Junos OS and Junos OS Evolved contain an improper authentication vulnerability in the J-Web management interface and NETCONF session handling, letting unauthenticated network attackers obtain root-level device configuration access via reachable J-Web HTTP/HTTPS service, exploit requires web management to be enabled.

  • 9.8 /10 Critical
    CVE-2026-101950 No auth

    Juniper Networks Junos OS - Buffer Overflow

    Juniper Networks Junos OS on SRX Series contains a heap-based buffer overflow caused by malformed IPv4 packets in the SVR component, letting unauthenticated network attackers cause denial of service and compromise confidentiality and integrity, exploit requires network access to an interface configured for Secure Vector Routing.

  • 9.8 /10 Critical
    CVE-2020-37282 No auth

    office-converter - Command Injection

    office-converter through 1.0.2 contains a command injection caused by unsanitized fileName input in generatePdf() or generateHtml(), letting attackers execute OS commands with Node.js process privileges, exploit requires crafted fileName input.

  • 9.8 /10 Critical
    CVE-2026-97816 No auth

    OpenSSH for Windows - Remote Code Execution

    OpenSSH for Windows contains a use after free vulnerability that allows unauthorized attackers to execute code over a network, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-97815 No auth

    Windows Error Reporting - Remote Code Execution

    Windows Error Reporting contains a heap-based buffer overflow caused by improper memory handling, letting unauthorized attackers execute code remotely, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-97814 No auth

    Windows Text Shaping - Remote Code Execution

    Windows Text Shaping contains a heap-based buffer overflow caused by improper memory handling, letting unauthorized attackers execute code remotely, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-97805 No auth

    Windows Partition Management Driver - Remote Code Execution

    Windows Partition Management Driver contains an out-of-bounds read vulnerability allowing unauthorized attackers to execute code remotely over a network, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-97749 No auth

    Microsoft Office Outlook - Remote Code Execution

    Microsoft Office Outlook contains a double free vulnerability caused by improper memory management, letting unauthorized attackers execute code remotely, exploit requires network access.

  • 9.9 /10 Critical
    CVE-2026-97381 Auth required

    Legacy Update - Broken Access Control

    Legacy Update 1.12.0 through 1.13.1 contains a broken access control caused by an origin validation error in the IsPermitted method of its ActiveX control, letting attackers via malicious IE webpages install updates, enumerate system info, or reboot without user consent, exploit requires user to visit a malicious webpage in Internet Explorer.