Critical CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

Critical CVEs

Newest first · severity as published by the vendor or NVD · page 50 of 125

  • 9.8 /10 Critical
    CVE-2026-51897

    RAGFlow - Broken Access Control

    RAGFlow 0.24.0 contains a broken access control vulnerability in get_dataset (api/apps/evaluation_app), letting attackers execute arbitrary code or commands, exploit requires access to the exposed entry point.

  • 9.8 /10 Critical
    CVE-2026-51893 No auth

    Infiniflow Ragflow - Broken Access Control

    Infiniflow Ragflow 0.24.0 contains an incorrect access control vulnerability caused by trace_mindmap accepting caller-selected tenant identifiers without ownership or membership checks, letting external attackers access unauthorized data.

  • 9.8 /10 Critical
    CVE-2026-51886 CISA KEVNo auth

    langflow-ai langflow - Code Injection

    langflow-ai langflow <= 1.9.3 contains a code injection caused by lack of sandboxing in /api/v1/validate/code endpoint, letting authenticated attackers execute arbitrary Python code remotely, exploit requires authentication.

  • 9.8 /10 Critical
    CVE-2026-51884 No auth

    Langchain Chatchat - Path Traversal

    Langchain Chatchat 0.3.1 contains a path traversal caused by crafted malicious filenames in /knowledge_base/upload_temp_docs endpoint, letting attackers write files to arbitrary server locations, exploit requires crafted filenames.

  • 9.1 /10 Critical
    CVE-2026-51883 No auth

    Langchain-Chatchat - Path Traversal

    Langchain-Chatchat 0.3.0;0.3.1 contains a path traversal caused by injection of path traversal sequences in the knowledge_base_name parameter, letting attackers write files outside the knowledge base root directory, exploit requires crafted input.

  • 9.1 /10 Critical
    CVE-2026-51882 No auth

    Langchain-Chatchat - Path Traversal

    Langchain-Chatchat 0.3.0 contains a path traversal caused by crafted malicious filenames in the /v1/files upload endpoint, letting attackers write files outside the intended directory, exploit requires no special privileges.

  • 9.8 /10 Critical
    CVE-2026-51881 No auth

    deeptutor - Command Injection

    deeptutor 1.4.0 contains a command injection caused by unsanitized input in ExecTool.execute, letting remote attackers execute arbitrary shell commands via the live tutorbot WebSocket interface, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-51880 No auth

    deeptutor - Path Traversal

    deeptutor 1.4.0 contains a path traversal caused by improper validation in EditFileTool.execute, letting remote attackers write or edit files outside the intended workspace via the live tutorbot WebSocket interface, exploit requires network access.

  • 9.1 /10 Critical
    CVE-2026-51879 No auth

    deeptutor - Authorization Bypass

    deeptutor 1.4.0 contains an authorization bypass caused by user-controlled object identifier in TutorBotManager.write_bot_file, letting remote attackers overwrite whitelisted control files, exploit requires remote access.

  • 9.1 /10 Critical
    CVE-2026-51876 No auth

    DeepTutor - Authorization Bypass

    DeepTutor 1.4.0 contains an authorization bypass caused by reuse of publicly exposed book_id in the book confirmation flow, letting unauthenticated or unauthorized callers overwrite persisted metadata and spine content.

  • 9.1 /10 Critical
    CVE-2026-51875 No auth

    Devika - Path Traversal

    Devika v1.0 contains a path traversal vulnerability caused by improper validation in the save_code_to_project function, letting attackers write files outside the project workspace, potentially compromising the server.

  • 9.8 /10 Critical
    CVE-2026-15989 PoC publicNo auth

    Super Forms – Drag & Drop Form Builder - Privilege Escalation

    Super Forms – Drag & Drop Form Builder plugin for WordPress <= 6.3.316 contains a privilege escalation caused by improper validation of the 'role' key in Register & Login add-on's before_email_success_msg() function, letting unauthenticated attackers register as administrators by injecting role=administrator in registration forms, exploit requires no authentication.

  • 9.3 /10 Critical
    CVE-2026-13043 PoC publicAuth required

    WatchGuard Endpoint Security - Authentication Bypass

    WatchGuard endpoint security contains a missing authentication vulnerability in Kernel Memory Access Driver (PSKMAD), letting local authenticated attackers bypass access control and disclose kernel and process memory.

  • 9.8 /10 Critical
    CVE-2026-12627

    Fortra Core Privileged Access Manager - Buffer Overflow

    Fortra Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow caused by improper handling in boks_autoregisterd, letting remote attackers with network access cause memory corruption, exploit requires network access to autoregistration service.

  • 9.8 /10 Critical
    CVE-2026-104286 CISA KEVPoC publicNo auth

    Fortinet FortiMail - Path Traversal

    Fortinet FortiMail 7.2.0 through 7.2.9, 7.4.0 through 7.4.8, 7.6.0 through 7.6.6, and 8.0.0 through 8.0.1 contain a path traversal vulnerability caused by improper limitation of pathname in HTTP/HTTPS request handling, letting unauthenticated attackers write arbitrary files on the system, exploit requires crafted HTTP/HTTPS requests.