High CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

High CVEs

Newest first · severity as published by the vendor or NVD · page 129 of 552

  • 8.1 /10 High
    CVE-2026-59976

    ConvertX - Path Traversal

    ConvertX < 0.18.0 contains a path traversal caused by unsanitized convert_to parameter in ImageMagick converter, letting authenticated or unauthenticated users write converted output to arbitrary paths, exploit requires user authentication or unauthenticated access if enabled.

  • 8.8 /10 High
    CVE-2026-57143 No auth

    PraisonAI praisonaiagents - Server Side Request Forgery

    PraisonAI praisonaiagents < 1.6.62 contains a server-side request forgery caused by unvalidated searxng_url parameter in searxng_search and search_web providers, letting attackers make internal requests and access sensitive JSON data, exploit requires crafted LLM input.

  • 7.4 /10 High
    CVE-2026-53997 No auth

    Netherman Portal del Hermano - Authentication Bypass

    Netherman Portal del Hermano before 2026-10-06 contains a broken authentication vulnerability caused by lack of rate limiting and distinct error messages in password-recovery endpoints, letting unauthenticated attackers take over member accounts by exploiting identity-verification oracles.

  • 8.8 /10 High
    CVE-2026-52903 Auth required

    ManageIQ - Remote Code Execution

    ManageIQ contains an insecure deserialization vulnerability caused by YamlLoadAliases module overriding YAML.safe_load to fallback to YAML.unsafe_load, letting authenticated attackers with dialog import access achieve remote code execution by uploading crafted YAML payloads.

  • 8.9 /10 High
    CVE-2026-49483 Auth required

    IBMi Visual Studio Code extension - Broken Access Control

    IBMi Visual Studio Code extension prior to 3.0.1 contains a broken access control vulnerability caused by insufficient verification of component integrity, letting local attackers alter programs and execute them under another account, exploit requires local access.

  • 7.2 /10 High
    CVE-2026-41510 No auth

    OWASP Coraza WAF - Broken Access Control & Denial of Service

    OWASP Coraza WAF 3.0.0 to 3.8.1 contains a broken access control vulnerability caused by silent omission of arguments exceeding SecArgumentsLimit in request processing, letting unauthenticated attackers bypass WAF rules and cause memory exhaustion.

  • 7.3 /10 High
    CVE-2026-21139

    Samsung Continuity Service - Broken Access Control

    Samsung Continuity Service for Windows < 4.6.1217.0 contains an improper access control vulnerability caused by insufficient restrictions, letting adjacent attackers manipulate connected mobile devices, exploit requires network adjacency.

  • 8.6 /10 High
    CVE-2026-21125 No auth

    Samsung libsimba.heifdec.media.samsung.so - Command Injection

    Samsung libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 contains a command injection caused by improper input validation in parsing sheifd, letting local attackers execute arbitrary code.

  • 8.6 /10 High
    CVE-2026-21124

    libsimba.heifdec.media.samsung.so - Remote Code Execution

    libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 contains a remote code execution vulnerability caused by improper input validation in getting cover image, letting local attackers execute arbitrary code, exploit requires local access.

  • 7.0 /10 High
    CVE-2026-21122 No auth

    Samsung libsamsungtts.so - Buffer Overflow

    Samsung libsamsungtts.so < SMR Oct-2026 Release 1 contains a buffer overflow caused by out-of-bounds write, letting local attackers execute arbitrary code, exploit requires local access.

  • 8.9 /10 High
    CVE-2026-21120 No auth

    WSM service - Use After Free

    WSM service prior to SMR Oct-2026 Release 1 contains a use after free vulnerability in WSM service, letting local attackers execute arbitrary code with system privileges, exploit requires local access.

  • 7.0 /10 High
    CVE-2026-21114 No auth

    libsmkvextractor.so - Buffer Overflow

    libsmkvextractor.so prior to SMR Oct-2026 Release 1 contains a buffer overflow caused by out-of-bounds write, letting local attackers execute arbitrary code, exploit requires local access.

  • 8.2 /10 High
    CVE-2026-19627 No auth

    IBM Planning Analytics - Path Traversal

    IBM Planning Analytics 2.0 and 2.1 contain a path traversal caused by improper validation of file paths, letting remote attackers read arbitrary host files and overwrite application files, exploit requires no special privileges.

  • 8.8 /10 High
    CVE-2026-19622 Auth required

    IBM Planning Analytics - Authentication Bypass & Privilege Escalation

    IBM Planning Analytics 2.0 and 2.1 contain an authentication bypass caused by improper validation of sub-requests, letting remote attackers bypass authentication and escalate privileges, exploit requires crafted sub-requests.

  • 8.8 /10 High
    CVE-2026-19620 Auth required

    IBM Planning Analytics - Authentication Bypass

    IBM Planning Analytics 2.0 and 2.1 contain a broken authentication caused by improper authentication, letting remote attackers gain unauthorized administrative access, exploit requires no special conditions.