High CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

High CVEs

Newest first · severity as published by the vendor or NVD · page 34 of 552

  • 7.5 /10 High
    CVE-2026-101957 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain an improper initialization vulnerability in the routing protocol daemon (rpd) caused by LLGR-stale route updates readvertised to non-LLGR peer groups, letting remote BGP peers cause rpd crashes, exploit requires remote BGP peer access.

  • 8.1 /10 High
    CVE-2026-101955 No auth

    Juniper Networks Junos OS - Buffer Overflow

    Juniper Networks Junos OS on SRX series contains a stack-based buffer overflow caused by malformed DNS packet injection in UTM Anti-Spam SBL, letting unauthenticated remote attackers execute arbitrary code or cause denial of service, exploit requires Anti-Spam SBL inspection enabled.

  • 7.5 /10 High
    CVE-2026-101952 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain an improper validation of consistency within input vulnerability in the routing protocol daemon (rpd), letting configured BGP ISO-VPN peers cause rpd crashes via specific ISO-VPN updates processed by BMP route monitoring or NSR, exploit requires configured BGP ISO-VPN peer.

  • 7.5 /10 High
    CVE-2026-101951 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain a denial of service vulnerability caused by improper validation of consistency in the routing protocol daemon (rpd), letting network-adjacent configured BGP peers cause service disruption by sending malformed BGP MCAST-TREE updates, exploit requires a configured BGP peer.

  • 7.5 /10 High
    CVE-2026-101949 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain a null pointer dereference caused by improper handling of VPN-flowspec BGP updates in routing protocol daemon (rpd), letting unauthenticated remote BGP neighbors cause denial of service, exploit requires BMP post-policy RIB-out monitoring configured.

  • 7.5 /10 High
    CVE-2026-101948 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain a null pointer dereference caused by processing a specific BGP FlowSpec update in the routing protocol daemon, letting remote unauthenticated BGP peers cause denial of service, exploit requires a crafted BGP FlowSpec update.

  • 7.5 /10 High
    CVE-2026-101945 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain an integer overflow caused by improper EVPN BGP route processing in the rpd process, letting remote attackers with EVPN BGP peering cause denial of service, exploit requires established EVPN BGP peering.

  • 7.5 /10 High
    CVE-2026-101944 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain an integer overflow caused by specially crafted EVPN route updates in the routing protocol daemon (rpd), letting attackers cause denial of service via accepted EVPN BGP peers.

  • 7.5 /10 High
    CVE-2026-101943 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain a denial of service vulnerability caused by improper input validation in the routing protocol daemon (rpd), letting unauthenticated network attackers cause service disruption via crafted BGP EVPN update messages, exploit requires network access.

  • 7.5 /10 High
    CVE-2026-101942 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain a denial of service vulnerability caused by improper handling of length parameter inconsistency in the routing protocol daemon (rpd) when processing malformed EVPN Type-3 or Type-4 routes from configured EVPN peers, letting unauthenticated network attackers cause service disruption.

  • 7.5 /10 High
    CVE-2026-101941 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain a null pointer dereference caused by crafted BGP route updates with specific routing-policy resolution-map and policy event-tracing enabled, letting configured BGP neighbors cause denial of service.

  • 7.5 /10 High
    CVE-2026-101940 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain a null pointer dereference caused by processing a BGP UPDATE with ISO-VPN and egress-protection enabled, letting unauthenticated configured BGP peers cause denial of service.

  • 7.5 /10 High
    CVE-2026-101939 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain a null pointer dereference caused by a configured peer sending a BGP UPDATE with an import policy referencing a non-existent routing table, letting attackers cause denial of service.

  • 7.8 /10 High
    CVE-2026-101927 Auth required

    Juniper Networks Junos OS - Buffer Overflow

    Juniper Networks Junos OS and Junos OS Evolved contain a heap-based buffer overflow caused by crafted IPC event messages in eventd, letting unprivileged local attackers cause denial of service or escalate privileges to root.

  • 7.2 /10 High
    CVE-2026-101924 No auth

    NewStatPress WordPress Plugin - Stored XSS

    NewStatPress WordPress plugin <= 1.4.5 contains a stored XSS caused by insufficient output escaping of visitor-supplied query strings in the 'Last referrers' meta box, letting unauthenticated attackers inject scripts executed by admin users, exploit requires admin to access Overview page.