High CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10425
Critical
1916
CISA KEV
79
Public PoC
384

Most common types

  • Broken Access Control 1290
  • Privilege Escalation 1190
  • Remote Code Execution 1111
  • Authentication Bypass 835
  • Denial of Service 799

Published per day, last 14 days

7 Oct Critical Other 20 Oct

Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026

High CVEs

Newest first · severity as published by the vendor or NVD · page 197 of 568

  • 8.8 /10 High
    CVE-2026-98339 No auth

    Linux Kernel - Denial of Service

    Linux kernel contains a logic flaw in cfg80211 where stale BSS entries are not properly removed due to BSS type filtering, letting rogue APs cause inconsistent BSS state, exploit requires rogue AP to trigger.

  • 7.0 /10 High
    CVE-2026-98331

    Linux Kernel mac80211 - Use After Free

    Linux kernel mac80211 component contains a use-after-free vulnerability caused by not removing virtual interfaces when their network device is unregistered, letting attackers cause kernel crashes (DoS), exploit requires triggering net device unregistration under specific conditions.

  • 7.0 /10 High
    CVE-2026-98330 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in cfg80211 when a network namespace is destroyed and wiphy is not properly moved, letting attackers cause kernel mode faults and potential denial of service, exploit requires triggering network namespace destruction.

  • 7.8 /10 High
    CVE-2026-98324 Auth required

    Linux Kernel dmaengine pxa - Logic Error

    Linux kernel dmaengine pxa contains a logic error caused by double counting hardware descriptors in pxad_alloc_desc, letting attackers potentially cause memory corruption or instability, exploit requires kernel-level access.

  • 7.8 /10 High
    CVE-2026-98320

    Linux Kernel netfilter - Use After Free

    Linux kernel netfilter flowtable contains a use-after-free vulnerability caused by premature release of connection tracking references, letting attackers cause memory corruption or denial of service, exploit requires kernel module usage.

  • 7.8 /10 High
    CVE-2026-98318 Auth required

    Linux kernel smb client - Buffer Overflow

    Linux kernel smb client contains a buffer overflow caused by improper validation of absolute native symlink targets without NT drive prefix, letting users with write access to mounted shares trigger memory corruption.

  • 7.8 /10 High
    CVE-2026-98315

    Linux Kernel ntfs - Race Condition

    Linux kernel ntfs subsystem contains a race condition caused by unprotected runlist updates in ntfs_non_resident_attr_shrink and ntfs_attr_map_cluster functions, letting attackers cause data corruption or volume errors, exploit requires concurrent access to NTFS volume.

  • 7.8 /10 High
    CVE-2026-98311

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability caused by transferring operstate before register_netdevice in virt_wifi_newlink(), letting attackers cause denial of service, exploit requires triggering device registration failure.

  • 7.8 /10 High
    CVE-2026-98305 Auth required

    Linux kernel net: dsa: mxl862xx - Use After Free

    Linux kernel net: dsa: mxl862xx contains a use-after-free vulnerability caused by improper handling of stats poll during teardown, letting attackers cause system instability or denial of service, exploit requires triggering device teardown or failed registration.

  • 7.5 /10 High
    CVE-2026-98290 No auth

    Linux Kernel Bluetooth RFCOMM - Denial of Service

    Linux kernel Bluetooth RFCOMM contains a deadlock vulnerability caused by socket lock inversion in listener cleanup, letting attackers cause denial of service by triggering a deadlock, exploit requires ability to initiate Bluetooth connections.

  • 8.8 /10 High
    CVE-2026-98283 Auth required

    Linux Kernel KVM PPC Book3S HV - Use After Free

    Linux kernel KVM PPC Book3S HV contains a use-after-free vulnerability caused by improper reference handling in kvmhv_emulate_tlbie_all_lpid(), letting concurrent vCPUs access freed memory, exploit requires concurrent nested guest vCPU execution.

  • 8.8 /10 High
    CVE-2026-98282 Auth required

    Linux Kernel - Integer Overflow

    Linux kernel contains an integer overflow vulnerability in powerpc/iommu due to improper validation of npages in iommu_tce_check_ioba, letting attackers cause potential memory corruption, exploit requires crafted input with npages > 1.

  • 7.8 /10 High
    CVE-2026-98281 Auth required

    Linux Kernel - Race Condition

    Linux kernel contains a race condition in futex handling caused by missing private hash allocation on vfork(), letting attackers cause inconsistent futex state, exploit requires use of vfork() or CLONE_VM.

  • 7.8 /10 High
    CVE-2026-98276

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability caused by improper locking of sk_flags in sock_gettstamp(), letting attackers cause kernel memory corruption via race conditions, exploit requires concurrent socket operations.

  • 8.1 /10 High
    CVE-2026-98261 No auth

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in cifs_chan_skip_or_disable() caused by improper handling of server and channel references, letting attackers cause memory corruption or denial of service, exploit requires crafted network interaction.