High CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

High CVEs

Newest first · severity as published by the vendor or NVD · page 167 of 556

  • 7.8 /10 High
    CVE-2026-84271 Auth required

    IBM Guardium Data Protection - Authentication Bypass

    IBM Guardium Data Protection 12.2 contains a signature verification bypass caused by a flaw in the patch installer, letting local attackers execute arbitrary code with root privileges, exploit requires local access.

  • 8.4 /10 High
    CVE-2026-84250 No auth

    IBM Guardium Data Protection - Privilege Escalation

    IBM Guardium Data Protection 12.2 contains weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component, letting local attackers recover root password and gain root privileges, exploit requires local access.

  • 8.1 /10 High
    CVE-2026-84247 Auth required

    IBM Guardium Data Protection - Path Traversal

    IBM Guardium Data Protection 12.2 contains a path traversal vulnerability that allows a remote authenticated attacker to cause denial of service by accessing unintended file paths.

  • 8.1 /10 High
    CVE-2026-84246 No auth

    IBM Guardium Data Protection - Buffer Overflow

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 contain a buffer overflow vulnerability in an unspecified component, letting remote attackers execute arbitrary code remotely, exploit requires network access.

  • 7.8 /10 High
    CVE-2026-84245 Auth required

    IBM Guardium Data Protection - Privilege Escalation

    IBM Guardium Data Protection 12.2 contains a local privilege escalation caused by a vulnerability in the cp_wrapper component, letting low-privileged local users gain root privileges and access or modify sensitive system files, exploit requires local access.

  • 7.5 /10 High
    CVE-2026-84230 No auth

    IBM Guardium Data Protection - Denial of Service

    IBM Guardium Data Protection 12.2.2 contains a denial of service caused by a race condition from concurrent unsynchronized writes to a shared map, letting remote attackers cause service disruption, exploit requires no special conditions.

  • 8.1 /10 High
    CVE-2026-84209 No auth

    IBM Guardium Data Protection - SQL Injection

    IBM Guardium Data Protection 12.2.2 and 12.1 contain a SQL injection caused by improper neutralization of special elements in SQL commands, letting remote attackers execute arbitrary SQL commands, exploit requires network access.

  • 8.1 /10 High
    CVE-2026-84198 No auth

    IBM Guardium Data Protection - Buffer Overflow

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 contain a buffer overflow vulnerability in an unspecified component, letting remote attackers execute arbitrary code remotely, exploit requires network access.

  • 8.1 /10 High
    CVE-2026-84058 No auth

    IBM Guardium Data Protection - Buffer Overflow

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 contain a buffer overflow caused by improper handling of TDS PRELOGIN packets, letting remote attackers cause denial of service or execute arbitrary code, exploit requires network access to the Collector.

  • 8.1 /10 High
    CVE-2026-84057 No auth

    IBM Guardium Data Protection - Command Injection

    IBM Guardium Data Protection 12.2.2 and 12.1 contain a command injection caused by improper neutralization of special elements in OS commands, letting remote attackers execute arbitrary commands, exploit requires network access.

  • 8.1 /10 High
    CVE-2026-84035 No auth

    IBM Guardium Data Protection - Buffer Overflow

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 contain a buffer overflow caused by improper handling of input, letting remote attackers execute arbitrary code remotely, exploit requires network access.

  • 7.7 /10 High
    CVE-2026-83947 Auth required

    Azure Event Grid - Broken Access Control

    Azure Event Grid contains a broken access control caused by missing authorization, letting authorized attackers perform network spoofing, exploit requires attacker to be authorized.

  • 8.7 /10 High
    CVE-2026-83943 No auth

    Azure API Center - Information Disclosure

    Azure API Center contains an information disclosure vulnerability caused by exposure of sensitive information, letting unauthorized attackers disclose information over a network, exploit requires no special privileges.

  • 8.1 /10 High
    CVE-2026-82900 No auth

    IBM Guardium Data Protection - Path Traversal

    IBM Guardium Data Protection 12.2.2 and 12.1 contain a path traversal vulnerability caused by improper limitation of a pathname to a restricted directory, letting remote attackers delete arbitrary files, exploit requires network access.

  • 8.1 /10 High
    CVE-2026-82895 No auth

    IBM Guardium Data Protection - Buffer Overflow

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 contain a buffer overflow vulnerability that allows remote attackers to execute arbitrary code.