High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10425
- Critical
- 1916
- CISA KEV
- 79
- Public PoC
- 384
Most common types
- Broken Access Control 1290
- Privilege Escalation 1190
- Remote Code Execution 1111
- Authentication Bypass 835
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 376 of 568
- 7.8 /10 HighCVE-2026-92507
Linux Kernel - Use After Free
Linux kernel contains a use after free vulnerability caused by improper synchronization in ib_dealloc_pd_user() during PD resource deallocation, letting attackers potentially access freed memory, exploit requires access to netlink path.
- 7.0 /10 HighCVE-2026-92504
CVE-2026-92504
In the Linux kernel, the following vulnerability has been resolved: thermal: intel: int3400: clean up ODVP on probe failures evaluate_odvp() creates per-ODVP sysfs files before the thermal zone and later probe resources are registered. The current unwind path only calls cleanup_odvp() from the late sysfs failure path, so failures after evaluate_odvp() but before that label, including thermal_tripless_zone_device_register() failures, leave the ODVP files and storage behind. Move the ODVP cleanup to the common ART/TRT unwind path so every failure after evaluate_odvp() releases the ODVP state. Also clear the cached ODVP pointers in cleanup_odvp(), because evaluate_odvp() can already call it for partial setup failures while probe continues.
- 7.0 /10 HighCVE-2026-92488 Auth required
Linux Kernel RDMA/erdma - Resource Leak
Linux kernel RDMA/erdma contains a resource leak vulnerability caused by incomplete object teardown when destroy commands fail, letting attackers cause resource leaks, exploit requires triggering command failures.
- 7.8 /10 HighCVE-2026-92485 Auth required
Linux Kernel - Denial of Service
Linux kernel contains a vulnerability in bpf_tracing_link_release caused by improper flag handling in BPF trampoline, letting attackers cause kernel warnings and potential instability, exploit requires attaching fexit to tail_call_reachable programs.
- 7.5 /10 HighCVE-2026-92230
Apache Karaf - Denial of Service
Apache Karaf contains a denial of service caused by caching XML parser/transformer factories in static ThreadLocal fields, leading to unbounded Metaspace growth when bundles are repeatedly installed or refreshed, letting attackers cause service disruption, exploit requires repeated bundle or feature operations.
- 7.1 /10 HighCVE-2026-91014 No auth
Realtyna Organic IDX & WPL Real Estate WordPress - Reflected XSS
Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin < 5.4.2 contain a reflected XSS caused by unsanitised and unescaped parameters reflected in the page, letting unauthenticated attackers execute scripts in visitors' browsers, exploit requires victim to follow a crafted link.
- 7.4 /10 HighCVE-2026-90997
Keycloak - Authentication Bypass
Keycloak contains a replay protection bypass caused by row-count semantic mismatch in stateless mode with MySQL or MariaDB, letting attackers replay single-use security artifacts to gain unauthorized access, exploit requires stateless mode deployment.
- 7.1 /10 HighCVE-2026-90986 No auth
Visitor Traffic Real Time Statistics Pro - Reflected XSS
Visitor Traffic Real Time Statistics Pro <= 11.21 contains a reflected XSS caused by improper input sanitization, letting unauthenticated attackers execute scripts in users' browsers, exploit requires no authentication.
- 7.1 /10 HighCVE-2026-90887 No auth
WP Inventory Manager - Stored XSS
WP Inventory Manager <= 2.5.4 contains a stored XSS caused by improper input sanitization, letting unauthenticated attackers execute scripts in users' browsers, exploit requires no authentication.
- 7.8 /10 HighCVE-2026-90435 Auth required
Linux kernel RDMA/mlx5 - Integer Overflow
Linux kernel RDMA/mlx5 contains an integer overflow caused by improper left-shift operations on user-supplied QP buffer size parameters, letting attackers cause buffer size miscalculation, exploit requires crafted user input.
- 7.8 /10 HighCVE-2026-90429 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by unsynchronized access to cmdqv->vintfs[] slots in iommu/tegra241-cmdqv error ISR, letting attackers cause NULL dereference or use-after-free, exploit requires concurrent error interrupts.
- 7.4 /10 HighCVE-2026-90427
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in iommu/tegra241-cmdqv caused by dereferencing a freed smmu pointer after devm_krealloc() failure, letting attackers cause system instability or crash, exploit requires kernel code execution.
- 8.8 /10 HighCVE-2026-90425
Linux Kernel - Logic Flaw in Stream ID Mapping
Linux kernel iommu/tegra241-cmdqv contains a logic flaw caused by improper handling of devices with multiple or zero Stream IDs in tegra241_vintf_init_vsid(), letting attackers cause invalid guest vSID mappings and out-of-bounds reads, exploit requires device with incorrect stream count.
- 7.8 /10 HighCVE-2026-90423 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by improper error handling in RDMA rxe ODP init path, letting attackers cause memory corruption, exploit requires triggering ODP init failure.
- 7.1 /10 HighCVE-2026-90419 No auth
Linux Kernel - Out of Bounds Read
Linux kernel contains an out-of-bounds read vulnerability caused by trusting super-root inode metadata size before nilfs_read_inode_common(), letting attackers craft malformed filesystem images to cause out-of-bounds read, exploit requires crafted filesystem image.