Critical CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

Critical CVEs

Newest first · severity as published by the vendor or NVD · page 88 of 166

  • 9.0 /10 Critical
    CVE-2026-93697 Auth required

    WHM Mass Modify Accounts - Stored XSS

    WHM Mass Modify Accounts interface contains a stored XSS vulnerability caused by improper input sanitization, letting attackers execute arbitrary scripts, exploit requires user interaction.

  • 9.0 /10 Critical
    CVE-2026-93029 Auth required

    WHM Manage SSL Hosts - Stored XSS

    WHM Manage SSL Hosts contains a stored XSS vulnerability caused by improper input sanitization, letting attackers execute arbitrary scripts on users, exploit requires user interaction.

  • 9.9 /10 Critical
    CVE-2026-90970 PoC publicAuth required

    GitLab AI Gateway - Command Injection

    GitLab AI Gateway 18.1.6 < 19.2.4, 19.3 < 19.3.2, and 19.4 < 19.4.1 contain a command injection caused by sandbox escape via specially crafted flow configuration in prompt template, letting authenticated users with Duo Agent Platform access execute arbitrary commands, exploit requires Duo Agent Platform access.

  • 9.0 /10 Critical
    CVE-2026-86345

    389-ds-base - Authentication Bypass

    389-ds-base contains a broken authentication caused by improper handling of buffered plaintext bytes during StartTLS negotiation, letting on-path attackers inject crafted LDAP messages causing authentication bypass, exploit requires man-in-the-middle position.

  • 9.8 /10 Critical
    CVE-2026-84411 PoC publicNo auth

    RouterOS - Remote Code Execution & Denial of Service

    RouterOS contains an integer underflow in HTTP request body handling, letting unauthenticated network attackers achieve remote code execution as root or cause denial of service using a crafted request.

  • 9.8 /10 Critical
    CVE-2026-82042

    UTMStack - Authentication Bypass

    UTMStack < 11.2.16 contains an authentication bypass caused by acceptance of a valid Utm-Internal-Key header without path restriction or rate limiting in InternalApiKeyFilter, letting remote attackers gain full administrative API access, exploit requires attacker to know INTERNAL_KEY value.

  • 9.9 /10 Critical
    CVE-2026-82041 Auth required

    UTMStack - Command Injection

    UTMStack < 11.2.16 contains a command injection caused by missing authorization checks in UTMIncidentCommandWebsocket.processCommand(), letting authenticated users execute arbitrary OS commands on monitored endpoints, exploit requires authentication.

  • 9.4 /10 Critical
    CVE-2026-75937 No auth

    Affected device - Command Injection

    Affected device contains a command injection caused by a specially crafted HTTP POST request to the web administration interface, letting unauthenticated attackers execute arbitrary OS commands with root privileges.

  • 9.8 /10 Critical
    CVE-2026-51922 No auth

    agentscope - Command Injection

    agentscope v1.0.20 contains a command injection caused by unsanitized input in execute_shell_command in src/agentscope/tool/_coding/_shell.py, letting attackers execute arbitrary code or commands remotely, exploit requires attacker control of input.

  • 9.8 /10 Critical
    CVE-2026-51918 No auth

    FinRobot - Command Injection

    FinRobot 1.0.0 contains a command injection caused by unsafe code execution in CodingUtils.create_file_with_code(), letting attackers execute arbitrary commands remotely, exploit requires no special privileges.

  • 9.8 /10 Critical
    CVE-2026-51915 No auth

    TransformerOptimus SuperAGI - Broken Access Control

    TransformerOptimus SuperAGI v0.0.14 contains an incorrect access control vulnerability caused by lack of organization ownership verification in tool controller endpoints, letting remote authenticated attackers read or modify other organizations' tool metadata.

  • 9.8 /10 Critical
    CVE-2026-51911

    Vanna - Code Injection

    Vanna v2.0.2 contains a code injection vulnerability caused by unsafe handling in VannaBase.get_plotly_figure, letting attackers execute arbitrary code or commands remotely, exploit requires accessible vulnerable entry point.

  • 9.1 /10 Critical
    CVE-2026-51906 No auth

    TaskingAI - Path Traversal

    TaskingAI v0.3.0 contains a path traversal caused by manipulation of the project_id parameter in the DALL-E 3 image generation tool save_url_image function, letting attackers write files to arbitrary locations on the server filesystem, exploit requires crafted request.

  • 9.8 /10 Critical
    CVE-2026-51904 No auth

    SuperAGI - Broken Access Control

    SuperAGI <= v0.0.14 contains an improper access control vulnerability in agent execution controller caused by lack of verification of agent ownership in create_agent_execution and create_agent_run, letting remote authenticated attackers create or start execution records for agents of other organizations, exploit requires authentication.

  • 9.8 /10 Critical
    CVE-2026-51898 No auth

    sinaptik-ai pandas-ai - Code Injection

    sinaptik-ai pandas-ai 3.0.0 contains a code injection caused by improper handling in CodeExecutor.execute, letting attackers execute arbitrary code remotely, exploit requires crafted input.