Critical CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

Critical CVEs

Newest first · severity as published by the vendor or NVD · page 76 of 166

  • 9.1 /10 Critical
    CVE-2026-76483 No auth

    Cisco License On-Prem - Hardcoded Credentials

    Cisco License On-Prem contains an insufficiently protected credentials vulnerability caused by weak credential protection, letting attackers potentially access sensitive credentials, exploit requires no special conditions.

  • 10.0 /10 Critical
    CVE-2026-76482

    Cisco License On-Prem - Improper Input Verification

    Cisco License On-Prem contains an improper input verification vulnerability caused by failure to properly verify inputs, letting attackers potentially exploit the system, exploit requires unspecified conditions.

  • 9.8 /10 Critical
    CVE-2026-76480 No auth

    Cisco License On-Prem - Authentication Bypass

    Cisco License On-Prem contains an authentication bypass caused by improper authentication implementation, letting attackers bypass authentication, exploit requires no special conditions.

  • 9.8 /10 Critical
    CVE-2026-76471 No auth

    Cisco NX-OS - Command Injection

    Cisco NX-OS Software contains a command injection vulnerability in the NX-API due to insufficient input validation, letting unauthenticated remote attackers execute arbitrary code with root privileges or cause denial of service, exploit requires sending crafted HTTP requests.

  • 9.8 /10 Critical
    CVE-2026-76465 No auth

    Cisco NX-OS - Remote Code Execution & Denial of Service

    Cisco NX-OS Software for Cisco Nexus 3000 and 9000 Series Switches contains a remote code execution and denial of service vulnerability caused by improper validation of MPLS echo-request packets, letting unauthenticated remote attackers execute code with root privileges or cause device reload, exploit requires sending crafted MPLS echo-request packets.

  • 9.6 /10 Critical
    CVE-2026-76464 No auth

    Cisco Networking - Buffer Overflow

    Cisco networking products contain buffer overflow vulnerabilities caused by improper buffer management, letting attackers potentially cause denial of service or execute arbitrary code, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-76459 No auth

    Cisco NX-OS - Out-of-Bounds Write

    Cisco NX-OS contains out-of-bounds write vulnerabilities caused by improper bounds checking, letting attackers potentially corrupt memory or cause denial of service, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-76455 No auth

    Cisco NX-OS - Broken Access Control

    Cisco NX-OS contains improper access control vulnerabilities caused by insufficient authorization checks, letting attackers gain unauthorized access, exploit requires network access.

  • 9.1 /10 Critical
    CVE-2026-76454 No auth

    Cisco License On-Prem - Unrestricted File Upload & Denial of Service

    Cisco License On-Prem contains an unrestricted file write and denial of service vulnerability caused by improper input validation and lack of authentication in the Smart Licensing Utility API, letting unauthenticated remote attackers write arbitrary files or cause DoS, exploit requires no authentication.

  • 9.8 /10 Critical
    CVE-2026-76285

    CVE-2026-76285

    Improper Adherence to Coding Standards. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.

  • 9.8 /10 Critical
    CVE-2026-76284

    CVE-2026-76284

    Improper Neutralization. Splunk addressed multiple internally identified vulnerabilities in Splunk Enterprise versions 10.4.3, 10.2.7, 10.0.10, and 9.4.15. The vulnerabilities are grouped by Common Weakness Enumeration (CWE), with one Common Vulnerabilities and Exposures (CVE) identifier assigned to each group. See Details for more information.

  • 9.8 /10 Critical
    CVE-2026-76268 PoC publicNo auth

    Splunk Enterprise - Command Injection

    Splunk Enterprise < 10.4.3 and < 10.2.7 contains a command injection caused by unauthenticated access to Patroni REST API on search head cluster members, letting unauthenticated attackers execute arbitrary OS commands remotely, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-62253 No auth

    Homer - Authentication Bypass

    Homer < 11.0.283 contains a broken authentication caused by JWT middleware functions allowing empty jwtSecret, letting attackers access protected API endpoints without authentication, exploit requires default configuration with empty jwtSecret.

  • 9.8 /10 Critical
    CVE-2026-62252

    Homer - Authentication Bypass

    Homer < 11.0.283 contains a broken authentication caused by default admin account with fixed password and no forced password change, letting attackers gain full administrative access, exploit requires access to login endpoint.

  • 9.1 /10 Critical
    CVE-2026-62176

    PraisonAI - Command Injection

    PraisonAI < 4.6.78 contains a command injection caused by direct interpolation of the agents_file parameter into an f-string executed via subprocess.Popen, letting attackers inject arbitrary Python code, exploit requires attacker control of agents_file input.