High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 11502
- Critical
- 2091
- CISA KEV
- 92
- Public PoC
- 393
Most common types
- Broken Access Control 1499
- Remote Code Execution 1456
- Privilege Escalation 1227
- Authentication Bypass 940
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 21 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 320 of 628
- HighCVE-2026-55224 No auth
MineAdmin - Path Traversal to Remote Code Execution
MineAdmin before 3.2.0-alpha.2 contains a path traversal vulnerability in the app-store plugin service where the identifier parameter is unsanitized in filesystem paths, allowing attackers to execute arbitrary code.
- 7.8 /10 HighCVE-2026-53605 Auth required
Reachy Mini ISO for Wireless - Privilege Escalation
Reachy Mini ISO for Wireless < 0.2.4 contains a local privilege escalation caused by an overly broad sudoers entry granting pollen daemon user passwordless sudo access to /usr/bin/systemctl without restrictions, letting local attackers escalate to root, exploit requires local pollen user privileges.
- 7.5 /10 HighCVE-2026-51860 No auth
Bisheng - Directory Traversal
Bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 contain a directory traversal vulnerability caused by improper input validation in src/backend/bisheng/linsight/domain/task_exec.py, letting attackers access arbitrary files, exploit requires crafted input.
- 7.5 /10 HighCVE-2026-51853 No auth
agent-zero - Path Traversal
agent-zero 1.7, 1.8, 1.9, and 1.10 contain a path traversal caused by FileBrowser class initializing with host root directory as workspace in python/helpers/file_browser.py, letting attackers access any file on the system without restriction, exploit requires no special privileges.
- 7.5 /10 HighCVE-2026-51852 No auth
agent-zero - Path Traversal
agent-zero 1.7, 1.8, 1.9, and 1.10 contain a path traversal caused by lack of normalization or validation of user-controlled file paths in python/helpers/file_browser.py:FileBrowser.save_file_b64, letting attackers access arbitrary files, exploit requires crafted file path input.
- 8.1 /10 HighCVE-2026-51570 Auth required
modelscope Agentscope - Path Traversal
modelscope Agentscope v1.0.0-v1.0.8 contains a path traversal caused by improper handling in insert_text_file, letting attackers access arbitrary files, exploit requires no special privileges.
- 8.1 /10 HighCVE-2026-51568 Auth required
modelscope Agentscope - Path Traversal
modelscope Agentscope v1.0.18-v1.0.0 contains a path traversal caused by improper handling in write_text_file, letting attackers access or modify arbitrary files, exploit requires no special privileges.
- 7.1 /10 HighCVE-2026-47602 Auth required
NVIDIA GPU Display Driver - Denial of Service & Information Disclosure
NVIDIA GPU Display Driver for Windows and Linux contains a denial of service and information disclosure vulnerability caused by dereferencing an untrusted pointer in the kernel mode driver, letting local users cause system crashes and leak information, exploit requires local user access.
- 7.8 /10 HighCVE-2026-47601 Auth required
NVIDIA GPU Display Driver - Privilege Escalation
NVIDIA GPU Display Driver for Windows and Linux contains a privilege escalation caused by improper preservation of memory access permissions in the DMA-BUF import path, letting unprivileged local users escalate privileges and execute code.
- 7.8 /10 HighCVE-2026-47600
NVIDIA GPU Display Driver - Code Execution & Privilege Escalation & DoS & Information Disclosure & Data Tampering
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer caused by an error-handling path operating on an uninitialized resource, letting attackers execute code, escalate privileges, cause DoS, disclose information, and tamper data, exploit requires local access.
- 7.8 /10 HighCVE-2026-47599 Auth required
NVIDIA GPU Display Driver for Linux - Code Execution & Privilege Escalation & DoS & Information Disclosure & Data Tampering
NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module caused by improper preservation of memory access permissions during DMA mapping, letting unprivileged local users execute code, escalate privileges, cause denial of service, disclose information, and tamper data, exploit requires local unprivileged access.
- 7.0 /10 HighCVE-2026-47598 Auth required
NVIDIA GPU Display Driver for Linux - Use After Free
NVIDIA GPU Display Driver for Linux contains a use-after-free vulnerability in the open-source kernel module event delivery path, letting unprivileged local users cause code execution, privilege escalation, denial of service, information disclosure, and data tampering, exploit requires local unprivileged user access.
- 7.8 /10 HighCVE-2026-47597 Auth required
NVIDIA GPU Display Driver - Use After Free
NVIDIA GPU Display Driver for Windows and Linux contains a use-after-free vulnerability caused by a missing self-reference guard in the open-source kernel module Resource Server's map cleanup path, letting unprivileged local users execute code, escalate privileges, cause denial of service, disclose information, and tamper data, exploit requires local unprivileged user access.
- 7.0 /10 HighCVE-2026-47596 Auth required
NVIDIA GPU Display Driver for Linux - Privilege Escalation
NVIDIA GPU Display Driver for Linux contains a privilege escalation vulnerability caused by improper preservation of memory permissions in the kernel mode layer, letting unprivileged users write to read-only memory and escalate privileges.
- 7.8 /10 HighCVE-2026-47595 Auth required
NVIDIA GPU Display Driver for Linux - Privilege Escalation
NVIDIA GPU Display Driver for Linux contains a privilege escalation vulnerability caused by improper preservation of memory permissions in the kernel mode layer, letting unprivileged users write to read-only memory, exploit requires local unprivileged user access.