Critical CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

Critical CVEs

Newest first · severity as published by the vendor or NVD · page 78 of 166

  • 9.8 /10 Critical
    CVE-2026-104334 No auth

    IBM Langflow OSS - Remote Code Execution

    IBM Langflow OSS 1.0.0 through 1.12.2 contains a remote code execution caused by improper control of code generation, letting remote attackers execute arbitrary code, exploit requires no special privileges.

  • 9.3 /10 Critical
    CVE-2026-103416

    Eclipse ThreadX NetX Duo - Out-of-Bounds Write

    Eclipse ThreadX NetX Duo 6.5.1.202602 contains an out-of-bounds write caused by a TLS 1.3 handshake message larger than the cache in the handshake message cache, letting a malicious or compromised server corrupt memory before certificate authentication completes, exploit requires a malicious server to send crafted handshake messages.

  • 9.3 /10 Critical
    CVE-2026-102782 PoC publicNo auth

    Joomla Extension ordasoft.com Simple Membership - SQL Injection

    Joomla Extension ordasoft.com Simple Membership < 7.4.0 contains an unauthenticated SQL injection caused by unsanitized input in site/simplemembership.php dispatching task=checkLoginPass, letting remote attackers execute arbitrary SQL queries, exploit requires no authentication.

  • 10.0 /10 Critical
    CVE-2026-102255 CISA KEVPoC publicNo auth

    SMA1000 Appliance - Server Side Request Forgery

    SMA1000 Appliance Work Place interface contains a server side request forgery caused by an unintended alternate access path, letting remote unauthenticated attackers perform unauthorized internal requests, exploit requires no authentication.

  • 9.8 /10 Critical
    CVE-2025-70521 No auth

    Fanvil x7a - Command Injection

    Fanvil x7a firmware version 2.6.0.1182 contains a command injection vulnerability caused by insecure handling of user-supplied input in the management portal's diagnostic ping tool, letting unauthenticated attackers execute arbitrary code on the underlying Android OS, exploit requires no authentication.

  • 10.0 /10 Critical
    CVE-2025-70518 No auth

    Fanvil x7a - Command Injection

    Fanvil x7a firmware version 2.6.0.1182 contains a command injection caused by insecure handling of user input in the management portal's diagnostic ping tool, letting unauthenticated attackers execute arbitrary code on the underlying Android OS, exploit requires no authentication.

  • 9.1 /10 Critical
    CVE-2025-70516 No auth

    Fanvil x7a - Broken Access Control

    Fanvil x7a firmware version 2.6.0.1182 contains a broken access control caused by lack of authentication restrictions in the websocket handler, letting unauthenticated users view device resources and perform diagnostic requests, exploit requires no authentication.

  • 9.4 /10 Critical
    CVE-2025-64393 Auth required

    Veeam Backup & Replication - Remote Code Execution

    Veeam Backup & Replication contains a remote code execution caused by privilege escalation vulnerability, letting a Backup Viewer execute arbitrary code as SYSTEM on the backup server, exploit requires Backup Viewer privileges.

  • 9.8 /10 Critical
    CVE-2026-98365 No auth

    Linux kernel RDMA/rxe - Integer Overflow

    Linux kernel RDMA/rxe contains an integer overflow in mr_check_range() caused by wraparound-prone arithmetic, letting remote unauthenticated peers trigger out-of-bounds read/write and kernel crash, exploit requires crafted RDMA-Write/Read RETH.

  • 9.8 /10 Critical
    CVE-2026-98323 No auth

    Linux kernel RDMA/siw - Out of Bounds Write

    Linux kernel RDMA/siw contains an out-of-bounds write caused by incorrect header copy length calculation in siw_get_hdr(), letting attackers trigger memory corruption via fragmented extended DDP/RDMAP headers, exploit requires crafted TCP packets.

  • 9.1 /10 Critical
    CVE-2026-95106 No auth

    Gitea - Path Confusion

    Gitea contains a path confusion vulnerability caused by accepting pushed Git trees with duplicate entries, letting contributors cause inconsistent file views between web and git checkout, exploit requires repository push access.

  • 9.8 /10 Critical
    CVE-2026-94293 No auth

    Asset Administration Shell - Broken Access Control

    Asset Administration Shell contains a broken access control vulnerability caused by unauthenticated remote attacker modifying submodel data via PATCH requests and reading data via GET endpoints, letting attackers modify and read data without authentication.

  • 9.8 /10 Critical
    CVE-2026-94205 PoC publicNo auth

    Gitea - Broken Access Control

    Gitea Actions contains a broken access control vulnerability caused by incorrect approval checks on fork pull request runs, letting attackers run fork-controlled workflow code on base repository runners without explicit approval, exploit requires Actions enabled and matching runner registered.

  • 9.6 /10 Critical
    CVE-2026-91140 No auth

    Progress Software Autonomous REST Connector GenAI Agents ARCGenAI-Generator - Command Injection

    Progress Software Autonomous REST Connector GenAI Agents ARCGenAI-Generator 2.0 contains a command injection caused by shell-based temporary-file cleanup instructions, letting attackers execute arbitrary OS commands on developer machines, exploit requires crafted Swagger/OpenAPI document.

  • 9.6 /10 Critical
    CVE-2026-86360 No auth

    Dell System Update - Path Traversal

    Dell System Update < 2.3.0.0 contains a path traversal caused by improper limitation of pathname in the application, letting unauthenticated remote attackers access filesystem and execute arbitrary code with root privileges.