Critical CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Critical CVEs
Newest first · severity as published by the vendor or NVD · page 87 of 125
- 9.8 /10 CriticalCVE-2026-91105
HP HPLIP - Multiple Vulnerabilities
HP HPLIP contains multiple vulnerabilities in various components, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification, exploit requires specific conditions.
- 9.8 /10 CriticalCVE-2026-91104
HP HPLIP - Multiple Vulnerabilities
HP HPLIP contains multiple vulnerabilities in various components, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions, exploit requires specific conditions.
- 9.8 /10 CriticalCVE-2026-91103
HP HPLIP - Multiple Vulnerabilities
HP HPLIP contains multiple vulnerabilities in various components, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification, exploit requires specific conditions.
- 9.8 /10 CriticalCVE-2026-91102
HP HPLIP - Multiple Vulnerabilities
HP HPLIP contains multiple vulnerabilities in various components, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions, exploit requires specific conditions.
- 9.8 /10 CriticalCVE-2026-91101
HP HPLIP - Multiple Vulnerabilities
HP HPLIP contains multiple vulnerabilities in various components, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification, exploit requires specific conditions.
- 9.8 /10 CriticalCVE-2026-91100
HP HPLIP - Multiple Vulnerabilities
HP HPLIP contains multiple vulnerabilities in various components, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions, exploit requires specific conditions.
- 9.8 /10 CriticalCVE-2026-91099
HP HPLIP - Multiple Vulnerabilities
HP HPLIP contains multiple vulnerabilities in various components, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions, exploit requires specific conditions.
- 9.8 /10 CriticalCVE-2026-91098
HP HPLIP - Multiple Vulnerabilities
HP HPLIP contains multiple vulnerabilities in various components, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification, exploit requires specific conditions.
- 9.8 /10 CriticalCVE-2026-91097 PoC public
HP HPLIP - Multiple Vulnerabilities
HP HPLIP contains multiple vulnerabilities in various components, potentially enabling remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions, exploit requires specific conditions.
- 9.8 /10 CriticalCVE-2026-90999 No auth
Sentry Seer - Remote Code Execution
Sentry Seer contains a trust-boundary violation caused by unauthenticated attacker-controlled telemetry being executed by an agent in a privileged automation environment, letting external attackers execute code without account access.
- 9.3 /10 CriticalCVE-2026-90049 No auth
Linux Kernel - Data Corruption & Denial of Service
Linux kernel contains a vulnerability in skb_zerocopy() where skb_tx_error() is incorrectly called on the source skb, causing destructive operations and improper buffer ownership handling, letting attackers cause data corruption or denial of service, exploit requires crafted packet triggering skb_orphan_frags() failure.
- 9.8 /10 CriticalCVE-2026-90048 No auth
Linux Kernel - Out of Bounds Read/Write
Linux kernel contains a slab-out-of-bounds write in ni_create_attr_list() caused by improper buffer sizing when processing NTFS attributes, letting attackers with access to crafted loop-mounted NTFS images cause heap buffer overflow, exploit requires mounting a crafted NTFS image and file attribute modification.
- 9.8 /10 CriticalCVE-2026-90042 No auth
Linux kernel Ceph - Denial of Service
Linux kernel contains a memory handling vulnerability in Ceph where vmalloc() buffers are improperly decrypted in fscrypt subsystem, causing kernel oops on non-x86 platforms, exploit requires crafted Ceph messages in vmalloc buffers.
- 9.8 /10 CriticalCVE-2026-90038
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in NFSD during export state revocation caused by improper client reference handling in nfsd4_revoke_export_states(), letting attackers cause memory corruption, exploit requires race condition during export removal.
- 9.8 /10 CriticalCVE-2026-90037
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in NFSD during close_lru reaping caused by improper client pointer handling, letting attackers cause memory corruption or denial of service, exploit requires concurrent client expiration.