Critical CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

Critical CVEs

Newest first · severity as published by the vendor or NVD · page 75 of 166

  • 9.4 /10 Critical
    CVE-2026-103663

    Ollama - Path Traversal & Remote Code Execution

    Ollama < 0.35.0 contains a path traversal caused by insufficient validation of layer digests in /api/pull endpoint, letting unauthenticated remote attackers write malicious files outside the model store, leading to remote code execution as root, exploit requires server process write access to /usr/lib/ollama.

  • 9.8 /10 Critical
    CVE-2026-103646 No auth

    Ultimate Multisite WordPress - Authentication Bypass

    Ultimate Multisite WordPress plugin < 2.17.0 contains an authentication bypass caused by inconsistent email normalization in duplicate-account check, letting unauthenticated attackers log in as existing users, exploit requires checkout form without password and target account without customer record.

  • 9.1 /10 Critical
    CVE-2026-97720 No auth

    Apache Impala - Authentication Bypass

    Apache Impala <= 4.5.2 contains a broken authentication caused by improper JWT/OAuth token signature validation in executor webserver, letting attackers access protected resources, exploit requires webserver configured to accept JWT/OAuth tokens.

  • 9.4 /10 Critical
    CVE-2026-96408 No auth

    Movable Type - Code Injection

    Movable Type contains a code injection vulnerability in the upgrade script, letting unauthenticated attackers execute arbitrary Perl scripts or SQL queries remotely, exploit requires no special privileges.

  • 9.8 /10 Critical
    CVE-2026-95606 No auth

    Liquid Web / StellarWP The Events Calendar - Insecure Deserialization

    Liquid Web / StellarWP The Events Calendar <= 6.17.4 contains an insecure deserialization vulnerability caused by deserialization of untrusted data, letting attackers perform object injection remotely, exploit requires crafted input.

  • 9.3 /10 Critical
    CVE-2026-95605 No auth

    Passionate Programmer Peter WP Data Access - SQL Injection

    Passionate Programmer Peter WP Data Access <= 5.5.82 contains a sql injection caused by improper neutralization of special elements in SQL commands, letting attackers perform blind SQL injection remotely, exploit requires crafted input.

  • 9.8 /10 Critical
    CVE-2026-93674 PoC publicNo auth

    IBM Langflow OSS - Command Injection

    IBM Langflow OSS 1.0.0 through 1.12.2 contains a command injection caused by improper neutralization of special elements in OS commands, letting remote attackers execute arbitrary code, exploit requires network access.

  • 9.1 /10 Critical
    CVE-2026-92414 No auth

    Apache Jackrabbit - Authentication Bypass

    Apache Jackrabbit 2.20.0 through 2.20.17, 2.22.0 through 2.22.4, and 2.23.0 through 2.23.5 contain a session fixation vulnerability caused by attaching cached authenticated sessions on token matches without credential checks, letting attackers reuse sessions across users, exploit requires crafted token headers.

  • 9.1 /10 Critical
    CVE-2026-81535 No auth

    wolfSSH - Authorization Bypass

    wolfSSH through 1.5.0 built with --enable-fwd contains an authorization bypass caused by missing checks on forwarded-tcpip channel opens in DoChannelOpen(), letting malicious SSH peers allocate unbounded buffers and open unauthorized forwarding channels, exploit requires SSH session with forwarding enabled.

  • 9.8 /10 Critical
    CVE-2026-76501

    Cisco NX-OS - Remote Code Execution & Denial of Service

    Cisco NX-OS Software contains a remote code execution and denial of service vulnerability caused by improper input validation in the Segment Routing over IPv6 (SRv6) NGOAM feature, letting unauthenticated remote attackers execute arbitrary code with root privileges or cause device reloads, exploit requires NGOAM and SRv6 features enabled.

  • 9.8 /10 Critical
    CVE-2026-76500

    CVE-2026-76500

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. &nbsp; The vulnerabilities tracked by CVE-2026-76500 are related to issues with improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664.

  • 9.8 /10 Critical
    CVE-2026-76499

    CVE-2026-76499

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76499 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-707. &nbsp;

  • 9.8 /10 Critical
    CVE-2026-76498 No auth

    Cisco Application Policy Infrastructure Controller - Broken Access Control

    Cisco Application Policy Infrastructure Controller contains improper access control vulnerabilities caused by insufficient authorization checks, letting attackers gain unauthorized access, exploit requires no special privileges.

  • 9.8 /10 Critical
    CVE-2026-76486

    Cisco NX-OS - Remote Code Execution & Denial of Service

    Cisco NX-OS Software contains a remote code execution and denial-of-service vulnerability caused by improper input validation in the VXLAN OAM (NGOAM) feature, letting unauthenticated remote attackers execute code with root privileges or cause device reloads, exploit requires NGOAM feature enabled.

  • 9.8 /10 Critical
    CVE-2026-76485

    Cisco NX-OS - Remote Code Execution & Denial of Service

    Cisco NX-OS Software contains a remote code execution and denial of service vulnerability caused by improper input validation in the VXLAN OAM feature, letting unauthenticated remote attackers execute code with root privileges or cause device reloads, exploit requires NGOAM feature enabled.