High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 13360
- Critical
- 2486
- CISA KEV
- 125
- Public PoC
- 437
Most common types
- Broken Access Control 1691
- Remote Code Execution 1609
- Privilege Escalation 1307
- Authentication Bypass 1121
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 2 of 725
- 7.8 /10 HighCVE-2026-99235 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in tracing subsystem caused by saving a compatible histogram pointer instead of the event file, letting attackers cause kernel memory corruption, exploit requires kernel tracing usage.
- 7.8 /10 HighCVE-2026-99233
Linux Kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability caused by improper verification of event_call identity in tracing/histograms, letting attackers cause use-after-free by manipulating synthetic event reference counts, exploit requires histogram registration on non-synthetic events with matching basename.
- 7.8 /10 HighCVE-2026-99231 Auth required
Linux Kernel io_uring - Use After Free
Linux kernel io_uring contains a use-after-free vulnerability caused by improper ownership handling of requests before clearing ->head in io_waitid functions, letting attackers cause kernel memory corruption, exploit requires triggering specific io_uring operations.
- 7.8 /10 HighCVE-2026-99227 Auth required
Linux Kernel - Race Condition
Linux kernel io_uring contains a reference wrap vulnerability caused by improper handling of cancellation state in io_waitid, letting attackers cause double completion of requests, exploit requires repeated cancellation attempts.
- 7.0 /10 HighCVE-2026-99224 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by improper handling of key type name during key description formatting in keyctl_describe_key(), letting local attackers cause kernel faults or crashes, exploit requires module unload race condition.
- 7.0 /10 HighCVE-2026-99218 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by releasing parked threads without holding RCU in coredump_finish(), letting attackers cause kernel memory corruption or crash, exploit requires kernel coredump processing.
- 8.0 /10 HighCVE-2026-94349 Auth required
Dell OpenManage Enterprise - Command Injection
Dell OpenManage Enterprise < 4.8.0 contains an OS command injection caused by improper neutralization of special elements, letting low privileged attackers with adjacent network access execute arbitrary commands.
- 7.8 /10 HighCVE-2026-92886 Auth required
TÜBİTAK BİLGEM eta-register - Privilege Escalation
TÜBİTAK BİLGEM Software Technologies Research Institute eta-register >= 2.0.8 < 2.0.9 contains a missing authorization vulnerability caused by lack of proper access control, letting attackers escalate privileges, exploit requires no special conditions.
- 8.1 /10 HighCVE-2026-91898
Dell Alienware Command Center - Authentication Bypass
Dell Alienware Command Center (AWCC) < 6.14.54.0 contains an improper verification of cryptographic signature vulnerability, letting unauthenticated adjacent network attackers execute arbitrary code and escalate privileges, exploit requires adjacent network access.
- 7.1 /10 HighCVE-2026-91895 Auth required
Dell Alienware Command Center - Broken Access Control
Dell Alienware Command Center < 6.14.54.0 contains an incorrect default permissions vulnerability, letting low privileged local attackers tamper with information, exploit requires local access with low privileges.
- 7.8 /10 HighCVE-2026-91893 Auth required
Dell Alienware Command Center - Elevation of Privilege
Dell Alienware Command Center < 6.14.54.0 contains an improper privilege management vulnerability, letting low privileged local attackers escalate their privileges, exploit requires local access with low privileges.
- 8.7 /10 HighCVE-2026-8923 Auth required
Zohocorp ManageEngine Eventlog Analyzer & Log360 - Remote Code Execution
Zohocorp ManageEngine Eventlog Analyzer and ManageEngine Log360 < 13062 contain an authenticated remote code execution caused by Log Forward option, letting authenticated attackers execute arbitrary code remotely, exploit requires authentication.
- 7.2 /10 HighCVE-2026-88810 Auth required
SUSE Rancher - Privilege Escalation
SUSE Rancher 2.15.2 and SUSE Rancher Webhook 0.11.0 to 0.11.4, 0.12.0 to 0.12.1 contain a privilege escalation caused by lack of validation on inheritedNamespacedRules in GlobalRole, letting non-administrative users gain excessive permissions in downstream clusters via global role binding, exploit requires user to have a global role binding.
- 7.6 /10 HighCVE-2026-88809 Auth required
SUSE Rancher Manager - Open Proxy
SUSE Rancher Manager 2.11.0 to 2.15.3 contains an open proxy vulnerability caused by improper allowlist enforcement in the /meta/proxy endpoint, letting remote attackers forward requests to unauthorized destinations, exploit requires network access to the proxy endpoint.
- 7.7 /10 HighCVE-2026-81938 Auth required
Grafana Mimir - Information Disclosure
Grafana Mimir < 3.1.7 and < 3.2.2 contains a file read vulnerability caused by insufficient validation of http_headers.<name>.files and basic_auth.username_file in Alertmanager tenant configurations, letting tenants with config upload permission read arbitrary files on the Alertmanager host by directing receivers to attacker-controlled servers.