High CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

High CVEs

Newest first · severity as published by the vendor or NVD · page 184 of 556

  • 8.8 /10 High
    CVE-2025-70522 No auth

    Fanvil x7a - Cross-Site Request Forgery

    Fanvil x7a firmware version 2.6.0.1182 contains a cross-site request forgery vulnerability caused by lack of cross-origin resource protection in request handler, letting attackers perform state-changing requests across origins, exploit requires victim interaction.

  • 8.8 /10 High
    CVE-2025-70517 No auth

    Fanvil x7a - Cross-Site Request Forgery

    Fanvil x7a firmware version 2.6.0.1182 contains a cross-site request forgery vulnerability caused by lack of cross-origin resource protection on state-changing requests, letting attackers perform unauthorized actions via CSRF.

  • 7.8 /10 High
    CVE-2026-98369 Auth required

    Linux Kernel - Race Condition

    Linux kernel contains an RCU usage issue in xfrm_trans_reinject caused by missing rcu_read_lock(), skb_dst_force(), and dev_hold() calls, letting attackers cause race conditions or memory corruption, exploit requires triggering specific packet reinjection via workqueue.

  • 7.8 /10 High
    CVE-2026-98368 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free and memory leak vulnerability caused by improper handling of zerocopy managed skb frags in ESP output path, letting attackers cause memory corruption and resource leaks, exploit requires crafted network packets.

  • 7.8 /10 High
    CVE-2026-98367

    Linux Kernel RDMA/siw - Use After Free

    Linux kernel RDMA/siw contains a use-after-free caused by improper locking and cleanup in siw_accept and siw_qp_modify functions, letting concurrent attackers cause memory corruption, exploit requires concurrent access to QP state.

  • 7.8 /10 High
    CVE-2026-98366 Auth required

    Linux Kernel RDMA/rxe - Use After Free

    Linux kernel RDMA/rxe contains a use-after-free caused by improper validation of access flags before reassigning MR's PD in rxe_rereg_user_mr(), letting local attackers cause memory corruption, exploit requires local access.

  • 7.8 /10 High
    CVE-2026-98364 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in xfrm bundle creation caused by improper handling of net_device references under RCU, letting local attackers cause memory corruption, exploit requires concurrent RTM_DELLINK operation.

  • 7.8 /10 High
    CVE-2026-98361 Auth required

    Linux Kernel - Broken Access Control

    Linux kernel contains a broken access control vulnerability in RDMA/rxe ODP write paths caused by missing HMM_PFN_WRITE check, letting unprivileged users overwrite read-only page cache via RDMA, exploit requires unprivileged user registering ODP MR over read-only mappings.

  • 7.0 /10 High
    CVE-2026-98360 Auth required

    Linux Kernel RDMA/rxe - Use After Free

    Linux kernel RDMA/rxe contains a use-after-free vulnerability caused by premature insertion of multicast groups into mcg_tree before rxe_mcast_add() succeeds, letting local userspace RDMA clients cause memory corruption, exploit requires local user access.

  • 7.0 /10 High
    CVE-2026-98359 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in RDMA core due to ib_get_eth_speed invoking ethtool callback on unregistering net_device, letting attackers cause denial of service, exploit requires asynchronous RDMA port query.

  • 8.1 /10 High
    CVE-2026-98357

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in IB/isert caused by missing synchronization of deferred control PDU completions before connection release, letting attackers cause memory corruption, exploit requires triggering deferred completions during connection teardown.

  • 7.1 /10 High
    CVE-2026-98349 No auth

    Linux Kernel wifi libipw - Buffer Over-read

    Linux kernel wifi libipw contains a buffer over-read caused by incorrect length calculation in libipw_process_probe_response and libipw_network_init, letting attackers cause memory corruption by sending too-short beacon or probe responses, exploit requires crafted management frames.

  • 7.1 /10 High
    CVE-2026-98348 No auth

    Linux Kernel - Out of Bounds Read

    Linux kernel contains a buffer overflow caused by improper length calculation in libipw_handle_assoc_resp() when processing too-short association responses, letting attackers cause out-of-bounds read, exploit requires crafted management frames.

  • 7.8 /10 High
    CVE-2026-98341 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in cfg80211 during asynchronous scan request cancellation, letting attackers cause kernel memory corruption, exploit requires triggering interface down during scan.

  • 8.8 /10 High
    CVE-2026-98339 No auth

    Linux Kernel - Denial of Service

    Linux kernel contains a logic flaw in cfg80211 where stale BSS entries are not properly removed due to BSS type filtering, letting rogue APs cause inconsistent BSS state, exploit requires rogue AP to trigger.