Critical CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

Critical CVEs

Newest first · severity as published by the vendor or NVD · page 51 of 166

  • 10.0 /10 Critical
    CVE-2026-97229 PoC publicNo auth

    GitLab CE/EE - Remote Code Execution

    GitLab CE/EE >= 19.2 < 19.2.8, >= 19.3 < 19.3.5, and >= 19.4 < 19.4.2 contain a remote code execution caused by insufficient regular expression validation in CI/CD configuration, letting unauthenticated users execute arbitrary code remotely, exploit requires crafted regex in CI/CD config.

  • 9.8 /10 Critical
    CVE-2026-97016 No auth

    Microsoft Office Outlook - Remote Code Execution

    Microsoft Office Outlook contains a heap-based buffer overflow caused by improper memory handling, letting unauthorized attackers execute code remotely, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-96934 No auth

    Windows DHCP Server - Remote Code Execution

    Windows DHCP Server contains a use after free vulnerability allowing unauthorized attackers to execute code remotely over a network, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-96924 No auth

    Windows OLE - Remote Code Execution

    Windows OLE contains an untrusted pointer dereference vulnerability caused by improper pointer handling, letting unauthorized attackers execute code remotely over a network, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-96909 No auth

    Windows BitLocker - Remote Code Execution

    Windows BitLocker contains a heap-based buffer overflow, letting unauthorized attackers execute code remotely over a network, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-96864 No auth

    Microsoft Failover Cluster Virtual Driver - Remote Code Execution

    Microsoft Failover Cluster Virtual Driver contains a double free vulnerability, letting unauthorized attackers execute code remotely, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-96320 No auth

    Windows DHCP Server - Remote Code Execution

    Windows DHCP Server contains a heap-based buffer overflow caused by improper memory handling, letting unauthorized attackers execute code remotely, exploit requires network access.

  • 9.1 /10 Critical
    CVE-2026-96252 No auth

    Active Directory Federation Services - Spoofing

    Active Directory Federation Services contains a spoofing vulnerability caused by improper verification of cryptographic signatures, letting unauthorized attackers perform spoofing over a network, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-96219 No auth

    Windows LSASS - Remote Code Execution

    Windows Local Security Authority Subsystem Service (LSASS) contains an out-of-bounds write vulnerability allowing unauthorized attackers to execute code remotely, exploit requires network access.

  • 9.9 /10 Critical
    CVE-2026-96119 Auth required

    IBM i - Remote Code Execution & Information Disclosure

    IBM i 7.3, 7.4, 7.5, and 7.6 contain a remote code execution and information disclosure vulnerability caused by improper data sanitization in the HTTP Server Administration web application, letting remote authenticated attackers execute arbitrary code or obtain sensitive information.

  • 9.8 /10 Critical
    CVE-2026-96113 No auth

    DNS Server - Remote Code Execution

    DNS Server contains a heap-based buffer overflow caused by improper memory handling, letting unauthorized attackers execute code remotely, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-96096 No auth

    Windows Media Player - Remote Code Execution

    Windows Media Player contains a heap-based buffer overflow caused by improper memory handling, letting unauthorized attackers execute code remotely, exploit requires network access.

  • 10.0 /10 Critical
    CVE-2026-94603 No auth

    Podman - Broken Access Control

    Podman 4.4.0 to 5.8.8 and 6.1.3 contains a broken access control vulnerability caused by treating images with io.podman.annotations.checkpoint.runtime.name annotation as checkpoints, letting attackers bypass container creation restrictions, exploit requires use of affected image annotations.

  • 9.1 /10 Critical
    CVE-2026-93909 No auth

    IBM WebSphere Application Server Liberty - Authentication Bypass

    IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 contains an authentication bypass caused by samlWeb-2.0 feature enabled, letting attackers bypass authentication, exploit requires samlWeb-2.0 feature enabled.

  • 9.1 /10 Critical
    CVE-2026-93895 No auth

    IBM WebSphere Application Server Liberty - Access Control Bypass

    IBM WebSphere Application Server Liberty 20.0.0.12 through 26.0.0.10 contains an access control bypass caused by improper enforcement on gRPC service methods, letting unauthenticated remote attackers bypass access controls.