Critical CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Critical CVEs
Newest first · severity as published by the vendor or NVD · page 8 of 125
- 9.3 /10 CriticalCVE-2026-103415 No auth
TLS 1.3 Client - Buffer Overflow
TLS 1.3 clients copy the server's cookie from HelloRetryRequest into the second ClientHello without validating cookie size, causing a buffer overflow before certificate authentication, letting malicious servers overwrite memory.
- 9.1 /10 CriticalCVE-2026-102893 No auth
Zulip Server - Authentication Bypass
Zulip Server <= 12.1 contains an authentication bypass caused by GenericOpenIdConnectBackend not rejecting false email_verified claims, letting attackers log into accounts with unverified emails, exploit requires misconfigured trusted identity provider.
- 9.2 /10 CriticalCVE-2026-102748 No auth
Dgraph - Broken Access Control
Dgraph Zero < 25.4.0 contains an unauthenticated access vulnerability caused by administrative HTTP routes on port 6080 without authentication, letting remote attackers disrupt the Zero control plane and destabilize Alpha nodes, exploit requires access to Zero HTTP port.
- 9.1 /10 CriticalCVE-2026-102476 No auth
Eclipse Vert.x - Misconfiguration
Eclipse Vert.x versions 5.0.0 to 5.0.12, 5.1.0 to 5.1.9, and 5.2.0 contain an insecure SSL context caching caused by improper SSL property handling in the Vert.x HTTP client, letting attackers obtain SSL contexts with weaker security properties, exploit requires client to request SSL context.
- 9.8 /10 CriticalCVE-2026-102182 No auth
Juniper Networks Junos OS - Remote Code Execution
Juniper Networks Junos OS on MX Series < 21.2R3-S11, 21.4 < 21.4R3-S12, 22.2 < 22.2R3-S8, 22.3 < 22.3R3-S5, 22.4 < 22.4R3-S9 contains a stack-based buffer overflow caused by improper handling of IKE certificate-based packets in the kmd component, letting unauthenticated network attackers execute code as root remotely, exploit requires crafted IKE certificate-based packets.
- 9.8 /10 CriticalCVE-2026-102178 No auth
Juniper Networks Junos OS - Buffer Overflow
Juniper Networks Junos OS and Junos OS Evolved contain a stack-based buffer overflow caused by flowspec route re-advertisement in BGP routing daemon with BGP update-threading enabled, letting configured BGP flowspec peers cause routing-engine compromise or denial of service, exploit requires configured BGP flowspec peer.
- 9.8 /10 CriticalCVE-2026-102175 No auth
Juniper Networks Junos OS - Remote Code Execution & Denial of Service
Juniper Networks Junos OS and Junos OS Evolved contain a heap-based buffer overflow caused by improper handling of frames in the sdxd service-deployment daemon, letting remote unauthenticated attackers execute code as root or cause denial of service via crafted TCP frames, exploit requires control or interception of the SDX/SRC server connection.
- 9.8 /10 CriticalCVE-2026-102031 No auth
Juniper Networks Junos OS Evolved - OS Command Injection
Juniper Networks Junos OS Evolved contains an OS command injection caused by improper handling in TACACS, letting low-privileged TACACS+-authenticated users execute commands with root privileges when periodic TACACS+ authorization-refresh is enabled.
- 9.8 /10 CriticalCVE-2026-101990 No auth
Juniper Networks Junos OS - Buffer Overflow
Juniper Networks Junos OS and Junos OS Evolved contain a stack-based buffer overflow caused by processing flow-spec updates in the routing protocol daemon (rpd), letting remote configured BGP peers cause crashes or remote code execution, exploit requires a configured BGP peer.
- 9.8 /10 CriticalCVE-2026-101986 No auth
Juniper Networks Junos OS - Authentication Bypass
Juniper Networks Junos OS and Junos OS Evolved contain an improper authentication vulnerability in J-Web, caused by insufficient authentication checks, letting unauthenticated network attackers bypass authentication and execute CGI content with elevated privileges via crafted HTTP requests.
- 9.8 /10 CriticalCVE-2026-101983 No auth
Juniper Networks Junos OS - Remote Code Execution & Denial of Service
Juniper Networks Junos OS and Junos OS Evolved contain a stack-based buffer overflow in the httpd process, letting unauthenticated network attackers cause remote code execution and denial of service, exploit requires J-Web virtual-domain configuration.
- 9.8 /10 CriticalCVE-2026-101982 No auth
Juniper Networks Junos OS - Buffer Overflow
Juniper Networks Junos OS and Junos OS Evolved contain a stack-based buffer overflow caused by protocol-valid route advertisements for an EVPN-VPWS service in the routing protocol daemon (rpd), letting configured BGP/EVPN peers execute root code or crash rpd, exploit requires configured BGP/EVPN peer.
- 9.8 /10 CriticalCVE-2026-101980 No auth
Juniper Networks Junos OS - Denial of Service
Juniper Networks Junos OS kernel with Extended Echo configured contains an integer underflow caused by improper input handling, letting unauthenticated network attackers cause denial of service via kernel crash, exploit requires Extended Echo configuration.
- 9.8 /10 CriticalCVE-2026-101956 No auth
Juniper Networks Junos OS - Authentication Bypass
Juniper Networks Junos OS contains an improper authentication vulnerability in the J-Web web management component, letting unauthenticated remote attackers execute arbitrary Junos commands with root privileges via the exposed web interface.
- 9.8 /10 CriticalCVE-2026-101954 No auth
Juniper Networks Junos OS - Authentication Bypass
Juniper Networks Junos OS and Junos OS Evolved contain an improper authentication vulnerability in the J-Web management interface and NETCONF session handling, letting unauthenticated network attackers obtain root-level device configuration access via reachable J-Web HTTP/HTTPS service, exploit requires web management to be enabled.