High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10425
- Critical
- 1916
- CISA KEV
- 79
- Public PoC
- 384
Most common types
- Broken Access Control 1290
- Privilege Escalation 1190
- Remote Code Execution 1111
- Authentication Bypass 835
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 372 of 568
- 7.5 /10 HighCVE-2026-93151 No auth
Linux kernel nvmet-rdma - Resource Leak
Linux kernel nvmet-rdma contains a resource leak caused by unreclaimed in-flight response resources during queue teardown, letting attackers cause memory leaks, exploit requires removal of nvme target with rdma transport while I/Os are in flight.
- 7.8 /10 HighCVE-2026-93148 Auth required
Linux Kernel - Out-of-Bounds Memory Access
Linux kernel contains a memory access vulnerability caused by improper bounds checking in BPF MEM_ALLOC BTF accesses, letting attackers cause out-of-bounds memory access, exploit requires kernel-level code execution.
- 7.8 /10 HighCVE-2026-93147 Auth required
Linux Kernel - Undefined
Linux kernel contains a vulnerability in s390/bpf where the ly instruction loads a 32-bit cpu_nr into a 64-bit register without zeroing upper bits, letting attackers cause potential data corruption, exploit requires crafted BPF programs.
- 7.8 /10 HighCVE-2026-93144
Linux kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability caused by improper validation of writes through untrusted BTF pointers in bpf, letting attackers bypass read-only policy, exploit requires use of untrusted BTF pointers.
- 7.8 /10 HighCVE-2026-93138 Auth required
Linux Kernel - Race Condition
Linux kernel contains a race condition in bpf_get_btf_vmlinux caused by improper memory ordering in BTF parsing, letting concurrent callers observe uninitialized data, exploit requires concurrent access to BPF verifier.
- 7.8 /10 HighCVE-2026-93137 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in bpf_find_vma() caused by accessing mm_struct without proper reference counting, letting attackers cause memory corruption, exploit requires executing BPF programs on foreign tasks.
- 7.8 /10 HighCVE-2026-93127 Auth required
Linux Kernel - Out-of-Bounds Access
Linux kernel contains a vulnerability in BPF sign-extending narrowing stack fills caused by improper handling of scalar id during sign extension, letting attackers cause out-of-bounds access, exploit requires crafted BPF programs.
- 7.8 /10 HighCVE-2026-93125 Auth required
Linux Kernel - Integer Overflow
Linux kernel contains an integer overflow vulnerability in BPF kfunc argument handling where rdonly_buf_size or rdwr_buf_size exceeding u32 max are not properly rejected, letting attackers cause incorrect memory size validation, exploit requires use of specific kfunc arguments.
- 7.8 /10 HighCVE-2026-93122 Auth required
Linux Kernel usb gadget UAC - Out of Bounds Write
Linux kernel usb gadget UAC1 and UAC2 configfs rate-list attributes contain a buffer overflow caused by lack of validation on rate list length before storing, letting attackers write out-of-bounds in fixed-size arrays, exploit requires writing more than ten rates.
- 7.0 /10 HighCVE-2026-93121 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in usb gadget f_fs component caused by improper fence cleanup in ffs_dmabuf_transfer() error paths, letting attackers cause undefined behavior, exploit requires triggering specific error conditions.
- 7.0 /10 HighCVE-2026-93116 Auth required
Linux Kernel asus-wmi - Resource Leak
Linux kernel platform/x86 asus-wmi driver contains a resource leak vulnerability caused by improper error path handling in asus_wmi_add(), letting attackers cause resource leaks during driver initialization, exploit requires driver initialization failure.
- 7.1 /10 HighCVE-2026-93112
Linux Kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability caused by bpf_cpumask_populate() accepting read-only cpumask pointers as writable destination, letting attackers bypass ownership rules, exploit requires kernel function usage.
- 7.8 /10 HighCVE-2026-93111 Auth required
Linux Kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability caused by tracing_multi trampolines not being marked as ftrace managed, letting attackers cause resource release failures, exploit requires attaching tracing_multi and fentry links.
- 8.2 /10 HighCVE-2026-93107 No auth
Linux Kernel RDMA/rxe - Race Condition
Linux kernel RDMA/rxe contains a logic flaw in packet processing after QP enters error state, causing duplicate packet completions and potential stream corruption, letting attackers cause data tampering, exploit requires race condition between disconnect and receive processing.
- 7.8 /10 HighCVE-2026-93105
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by esp_ssg_unref() incorrectly unreferencing managed frag pages in esp, letting attackers cause page reference underflow and potential memory corruption, exploit requires use of managed frag skb.