High CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10425
Critical
1916
CISA KEV
79
Public PoC
384

Most common types

  • Broken Access Control 1290
  • Privilege Escalation 1190
  • Remote Code Execution 1111
  • Authentication Bypass 835
  • Denial of Service 799

Published per day, last 14 days

7 Oct Critical Other 20 Oct

Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026

High CVEs

Newest first · severity as published by the vendor or NVD · page 325 of 568

  • 8.8 /10 High
    CVE-2026-51997 No auth

    Geelen MCP-Remote - Command Injection

    Geelen MCP-Remote 0.1.16 through 0.1.38 contains a command injection caused by improper handling in open() functions, letting remote attackers execute arbitrary code remotely, exploit requires no special privileges.

  • 7.5 /10 High
    CVE-2026-51995 No auth

    Geelen MCP-Remote - Information Disclosure

    Geelen MCP-Remote 0.1.32 through 0.1.38 contains an information disclosure vulnerability caused by exposure in src/lib/authorization-server-metadata.ts and src/lib/utils.ts components, letting remote attackers obtain sensitive information, exploit requires network access.

  • 7.1 /10 High
    CVE-2026-48070 Auth required

    Docmost - Path Traversal

    Docmost < 0.80.1 contains a path traversal caused by attacker-controlled avatarUrl values reused by avatar cleanup, letting authenticated low-privileged users delete arbitrary local files or directories, exploit requires authentication.

  • 7.5 /10 High
    CVE-2026-14780 Auth required

    PaperCut NG/MF - Command Injection

    PaperCut NG/MF contains a command injection caused by insufficient sanitization and access restrictions in the device-scripting execution engine, letting authenticated admin users execute OS commands with administrative privileges.

  • 8.1 /10 High
    CVE-2026-13467 Auth required

    Altera Trusted Firmware - Out of Bounds Write

    Altera Trusted Firmware through socfpga_v2.14.0 contains an out-of-bounds write vulnerability caused by improperly configured or implemented memory protections, letting attackers corrupt memory, exploit requires no special privileges.

  • 8.1 /10 High
    CVE-2026-13466 Auth required

    Altera Trusted Firmware - Buffer Overflow

    Altera Trusted Firmware <= socfpga_v2.14.0 contains a buffer overflow caused by incorrect calculation of buffer size in HPS, letting attackers overflow buffers, exploit requires crafted input.

  • 8.1 /10 High
    CVE-2026-13465 Auth required

    Altera Trusted Firmware - Buffer Overflow

    Altera Trusted Firmware <= socfpga_v2.14.0 contains a buffer overflow caused by improper memory protection configuration in HPS, letting attackers exploit memory corruption, exploit requires crafted input.

  • 8.8 /10 High
    CVE-2026-13248 Auth required

    Honeywell PD45 Industrial Printer - Remote Code Execution

    Honeywell PD45 Industrial Printer F10.19.010040 contains an authenticated remote code execution caused by arbitrary file write in the Intermec Fingerprint Command Interface, letting authenticated admin or itadmin users execute malicious commands.

  • 7.8 /10 High
    CVE-2026-96889 PoC publicNo auth

    librsvg - Use After Free

    librsvg contains a use-after-free vulnerability caused by incorrect freeing of XML entities during processing of nested XML inclusions with duplicate entity declarations, letting attackers cause denial of service or remote code execution, exploit requires crafted SVG document.

  • 7.6 /10 High
    CVE-2026-96826 Auth required

    Shazzad Hossain Khan W4 Post List - SQL Injection

    Shazzad Hossain Khan W4 Post List <= 3.0.6 contains an SQL injection caused by improper neutralization of special elements in SQL commands, letting attackers perform blind SQL injection remotely, exploit requires crafted requests.

  • 7.4 /10 High
    CVE-2026-96808 No auth

    Flatpak - Privilege Escalation

    Flatpak < 1.18.1 contains a local privilege escalation caused by symlink traversal in revokefs writer used by flatpak-system-helper, letting local attackers modify root-controlled files and escalate privileges, exploit requires active local session.

  • 8.8 /10 High
    CVE-2026-96804 Auth required

    MLflow statsmodel - Remote Code Execution

    MLflow statsmodel flavor 2.1.0 to 3.14.0 contains a remote code execution vulnerability caused by omission of MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control in _load_model(), letting remote attackers execute arbitrary code via crafted MLmodel artifact, exploit requires crafted artifact.

  • 8.8 /10 High
    CVE-2026-96775 No auth

    MLflow dspy flavor - Remote Code Execution

    MLflow dspy flavor >= 2.0 contains a remote code execution vulnerability caused by improper application of MLFLOW_ALLOW_PICKLE_DESERIALIZATION control only on .pkl model paths, letting remote attackers execute arbitrary code via crafted MLmodel artifact.

  • 8.1 /10 High
    CVE-2026-96756 No auth

    Orval - Command Injection

    Orval < 8.30.0 contains a code injection caused by failure to escape date default values in @orval/core factory generator, letting attackers execute arbitrary code with consumer process privileges, exploit requires factoryMethods and useDates options enabled.

  • 7.5 /10 High
    CVE-2026-96673 No auth

    Photoview - SQL Injection

    Photoview 2.4.0 contains an sql injection caused by manipulation of the album_id path segment in the album download route, letting unauthenticated attackers extract arbitrary data from the database using blind or time-based techniques.