Critical CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Critical CVEs
Newest first · severity as published by the vendor or NVD · page 89 of 125
- 9.8 /10 CriticalCVE-2026-89788 No auth
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in ksmbd's smb2_tree_connect() caused by improper reference handling during tree connection initialization, letting attackers cause memory corruption, exploit requires concurrent session logoff race condition.
- 9.1 /10 CriticalCVE-2026-89786 No auth
Linux Kernel ext4 - Out of Bounds Read
Linux kernel ext4 contains an out-of-bounds read caused by improper bounds checking in ext4_read_inline_dir(), letting local attackers trigger slab-out-of-bounds read, exploit requires local access.
- 9.8 /10 CriticalCVE-2026-89783 No auth
Linux Kernel - Out of Bounds Write
Linux kernel contains an out-of-bounds write vulnerability in xfrm6_input_addr() due to an off-by-one error in secpath depth check, letting attackers cause memory corruption, exploit requires crafted IPv6 packets with specific headers.
- 9.1 /10 CriticalCVE-2026-89779 No auth
Linux Kernel - Information Disclosure
Linux kernel fs/ntfs3 contains an information disclosure vulnerability caused by improper validation of ef->size in extended attribute records, letting local attackers leak heap memory via crafted NTFS images, exploit requires local access.
- 9.8 /10 CriticalCVE-2026-89778 No auth
Linux Kernel - Out-of-Bounds Read
Linux kernel contains an out-of-bounds read vulnerability in isofs due to incorrect page array access on empty zisofs blocks, letting local attackers cause memory corruption via crafted ISO9660 images, exploit requires crafted ISO9660 image.
- 9.3 /10 CriticalCVE-2026-89775 No auth
Linux Kernel KVM arm64 - Denial of Service
Linux kernel KVM arm64 contains a logic error caused by improper handling of negative S1 walk levels in VNCR TLB size evaluation, letting attackers potentially cause incorrect TLB invalidation size calculation, exploit requires kernel-level access.
- 9.1 /10 CriticalCVE-2026-88592 No auth
kkFileView - Server-Side Request Forgery
kkFileView >= 4.2.0 contains a server-side request forgery caused by inconsistent URL parameter validation in the /getCorsFile endpoint, letting attackers fetch arbitrary URLs server-side, exploit requires crafted request with specific parameters.
- 9.1 /10 CriticalCVE-2026-86462 No auth
Apache Airflow FAB provider - Authentication Bypass
Apache Airflow FAB provider contains a broken authentication caused by failure to invalidate existing database-backed sessions after password change via Admin user-edit PATCH endpoint, letting attackers with existing session cookies maintain access, exploit requires attacker to have victim's session cookie.
- 9.6 /10 CriticalCVE-2026-86106
Edge - Privilege Escalation
Edge units with HA enabled contain a privilege escalation vulnerability caused by unauthenticated access to sensitive HA peer functions over the private HA interconnect, letting unauthenticated actors execute elevated commands.
- 9.6 /10 CriticalCVE-2026-85385 No auth
Concrete CMS - Stored XSS
Concrete CMS < 9.5.4 contains a stored cross-site scripting caused by lack of validation and output encoding of user timezone value on the Dashboard user management page, letting attackers execute scripts in administrator sessions, exploit requires concrete.misc.user_timezones enabled and either authenticated user or public registration enabled.
- 9.8 /10 CriticalCVE-2026-82717
NLnet Labs Unbound - Remote Code Execution
NLnet Labs Unbound <= 1.26.0 contains a heap buffer overflow caused by improper handling of CNAME synthesis and max TTL rewriting in packet buffer, letting remote attackers cause memory corruption or remote code execution, exploit requires crafted upstream response.
- 9.8 /10 CriticalCVE-2026-82311 No auth
Apache Airflow FAB provider - Authentication Bypass
Apache Airflow FAB provider before 3.9.0 contains a broken authentication caused by inconsistent session identifier comparison in database-backed sessions, letting attackers with stolen session cookies maintain access after password reset, exploit requires use of FAB auth manager with database session backend.
- 9.8 /10 CriticalCVE-2026-81642 PoC publicNo auth
NLnet Labs Unbound - Buffer Overflow
NLnet Labs Unbound <= 1.26.0 contains a buffer overflow in DNSSEC validator caused by a DNSKEY with an owner compression pointer to its own RDATA, letting remote attackers cause denial of service or remote code execution, exploit requires attacker-controlled malicious zone.
- 10.0 /10 CriticalCVE-2026-76460 CISA KEVPoC publicNo auth
Cisco Identity Services Engine - Authentication Bypass
Cisco Identity Services Engine contains an authentication bypass caused by insufficient authentication control on an API endpoint, letting unauthenticated remote attackers gain unauthorized access, exploit requires crafted request to API endpoint.
- 10.0 /10 CriticalCVE-2026-76423
Cisco ISE - Broken Access Control
Cisco ISE and Cisco ISE-PIC contain a broken access control vulnerability caused by insufficient authorization checks in the REST API web service, letting unauthenticated remote attackers gain administrative access, exploit requires access to the REST API port.