Critical CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Critical CVEs
Newest first · severity as published by the vendor or NVD · page 91 of 125
- 9.6 /10 CriticalCVE-2026-20331
CVE-2026-20331
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20331 are related to the failure of protection mechanisms issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-693.
- 9.9 /10 CriticalCVE-2026-20330
CVE-2026-20330
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20330 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-707.
- 9.9 /10 CriticalCVE-2026-20329 PoC publicAuth required
Cisco Secure Firewall - Denial of Service
Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software contain an improper handling of exceptional conditions vulnerability (CWE-703), letting attackers cause potential denial of service or unexpected behavior, exploit requires triggering exceptional conditions.
- 9.8 /10 CriticalCVE-2026-20326
Cisco Nexus Dashboard - Authentication Bypass
Cisco Nexus Dashboard contains missing authentication for critical functions caused by lack of proper access controls, letting attackers perform unauthorized actions, exploit requires access to the system.
- 9.9 /10 CriticalCVE-2026-20325 Auth required
Cisco Nexus Dashboard - Command Injection
Cisco Nexus Dashboard contains a command injection vulnerability caused by improper neutralization of special elements in command issuance, letting attackers execute arbitrary commands, exploit requires crafted input.
- 9.9 /10 CriticalCVE-2026-20324 Auth required
Cisco Secure Firewall Management Center - Command Injection
Cisco Secure Firewall Management Center contains a command injection caused by improper permissions in sftunnel inter-device communication protocol, letting authenticated remote attackers execute arbitrary commands as root, exploit requires valid user credentials.
- 9.9 /10 CriticalCVE-2026-20322 Auth required
Cisco Nexus Dashboard - Broken Access Control
Cisco Nexus Dashboard contains improper access control vulnerabilities caused by insufficient authorization checks, letting attackers gain unauthorized access, exploit requires network access.
- 9.9 /10 CriticalCVE-2026-20307 Auth required
Cisco ISE - Remote Code Execution & Privilege Escalation
Cisco ISE contains an insecure deserialization vulnerability caused by processing user-supplied Java byte streams in the web-based management interface, letting authenticated remote attackers execute arbitrary commands and elevate privileges, exploit requires low-privileged administrative credentials.
- 9.1 /10 CriticalCVE-2026-20306 Auth required
Cisco ISE - Command Injection & Privilege Escalation
Cisco ISE and ISE-PIC contain a command injection caused by improper validation of user-supplied input in the REST API, letting authenticated remote attackers execute arbitrary code and escalate privileges to root, exploit requires valid administrative credentials.
- 9.1 /10 CriticalCVE-2026-20305 Auth required
Cisco ISE - Command Injection & Privilege Escalation
Cisco ISE and ISE-PIC contain a command injection caused by improper validation of user-supplied input in diagnostic tools, letting authenticated remote attackers execute arbitrary code and elevate privileges to root, exploit requires administrative credentials.
- 9.1 /10 CriticalCVE-2026-20284 Auth required
Cisco ISE - SQL Injection
Cisco ISE contains a SQL injection caused by insufficient validation of user input in the SXP REST API, letting authenticated remote attackers view or modify database data and cause DoS, exploit requires valid admin credentials and SXP service enabled.
- 9.8 /10 CriticalCVE-2026-20242 No auth
Cisco Secure Firewall Management Center - Remote Code Execution & Privilege Escalation
Cisco Secure Firewall Management Center contains an insecure deserialization vulnerability caused by processing user-supplied Java byte streams from hosts in the external database access list, letting unauthenticated remote attackers execute arbitrary commands as root, exploit requires attacker control of a host in the external database access list.
- 9.1 /10 CriticalCVE-2026-20237
CVE-2026-20237
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20237 are related to improper input validation issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-20.
- 9.9 /10 CriticalCVE-2026-20234
Cisco Identity Services Engine - Hardcoded Credentials
Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector contain insufficiently protected credentials vulnerabilities caused by weak credential protection, letting attackers potentially access sensitive credentials, exploit requires internal access.
- 9.1 /10 CriticalCVE-2026-20211 Auth required
Cisco ISE - Remote Code Execution & Denial of Service
Cisco ISE contains an insecure deserialization vulnerability caused by processing crafted serialized Java objects, letting authenticated remote attackers with high-privileged admin credentials execute arbitrary commands and cause DoS.