High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10425
- Critical
- 1916
- CISA KEV
- 79
- Public PoC
- 384
Most common types
- Broken Access Control 1290
- Privilege Escalation 1190
- Remote Code Execution 1111
- Authentication Bypass 835
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 377 of 568
- 7.7 /10 HighCVE-2026-90408 No auth
Linux Kernel - Out-of-Bounds Read
Linux kernel contains an out-of-bounds read vulnerability in ath12k_wmi_process_csa_switch_count_event caused by missing length checks on WMI_TAG_PDEV_CSA_SWITCH_COUNT_STATUS_EVENT event struct, letting attackers cause memory overreads, exploit requires crafted firmware event.
- 7.7 /10 HighCVE-2026-90407 No auth
Linux Kernel - Out of Bounds Read
Linux kernel contains a buffer overread in ath11k_wmi_process_csa_switch_count_event caused by missing length checks on WMI_TAG_PDEV_CSA_SWITCH_COUNT_STATUS_EVENT event struct and unchecked num_vdevs field, letting attackers cause out-of-bounds reads, exploit requires crafted firmware event.
- 7.0 /10 HighCVE-2026-90403
Linux Kernel - Resource Cleanup Error
Linux kernel contains a resource cleanup error in rtl_pci_probe() of rtlwifi PCI driver, caused by incorrect goto label skipping cleanup functions, letting attackers potentially cause resource leaks or instability, exploit requires triggering device initialization.
- 7.0 /10 HighCVE-2026-90402
Linux Kernel - Denial of Service
Linux kernel contains a device management flaw caused by improper cleanup in mhi_register_controller() when sysfs_create_file() fails, letting attackers cause resource leaks or inconsistent device states, exploit requires triggering sysfs failure.
- 7.1 /10 HighCVE-2026-90401
Linux Kernel md - Data Integrity & Availability Impact
Linux kernel md subsystem removes REQ_NOWAIT support from raid1, raid10, and raid456 due to incomplete handling causing potential data divergence on write failures, letting attackers cause data inconsistency, exploit requires ability to trigger writes on affected RAID levels.
- 8.4 /10 HighCVE-2026-90399 No auth
Linux Kernel - Buffer Overflow
Linux kernel contains a buffer overflow caused by stride mismatch in ath12k_wmi_mac_phy_caps_parse() during mac_phy_caps buffer allocation and memcpy, letting attackers cause memory corruption, exploit requires crafted firmware TLVs.
- 8.4 /10 HighCVE-2026-90398
Linux Kernel - Buffer Overflow
Linux kernel contains a buffer overflow caused by a stride mismatch in ath11k_wmi_tlv_mac_phy_caps_parse() during mac_phy_caps buffer allocation, letting attackers cause memory corruption, exploit requires crafted firmware TLVs.
- 7.8 /10 HighCVE-2026-90392
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by accessing bpf link program pointer without proper locking in bpf_link_show_fdinfo and bpf_link_get_info_by_fd, letting attackers cause memory corruption, exploit requires concurrent bpf_link_update.
- 7.8 /10 HighCVE-2026-90388 Auth required
Linux Kernel - Memory Allocation Handling Flaw
Linux kernel contains a memory allocation handling flaw in iommu/dma non-blocking, non-coherent allocation path, caused by improper failure detection in dma_alloc_from_pool(), letting kernel potentially mismanage IOMMU mappings, exploit requires kernel code execution.
- 7.8 /10 HighCVE-2026-90387 Auth required
Linux Kernel - Memory Management Vulnerability
Linux kernel contains a memory management vulnerability caused by incorrect virtual address handling in swiotlb dynamic pools, letting attackers cause allocation failures or memory corruption, exploit requires kernel-level access.
- 7.8 /10 HighCVE-2026-90383 Auth required
Linux kernel misc: sgi-gru - Denial of Service
Linux kernel misc: sgi-gru contains a vulnerability caused by interrupt-context page-table walks without proper locking, letting attackers cause potential system instability or denial of service, exploit requires interrupt context.
- 8.8 /10 HighCVE-2026-90381
Linux kernel mt76 - Denial of Service
Linux kernel contains a vulnerability in mt76 driver caused by improper handling of channel context with different bands in mt76_switch_vif_chanctx(), letting attackers cause potential disruption during channel switches, exploit requires performing rapid channel switches on different radios.
- 8.8 /10 HighCVE-2026-90380 No auth
Linux kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in mt76_rx_poll_complete caused by a race condition where rx_status holds a pointer to a removed STA's wcid, letting attackers cause memory corruption or kernel crash, exploit requires triggering specific race conditions.
- 8.8 /10 HighCVE-2026-90379
Linux Kernel mt76 - Denial of Service
Linux kernel mt76 mt7921 driver contains an invalid memory access vulnerability caused by unvalidated DMA queue index reads returning 0xFFFFFFFF during PCIe AER bus hang, letting attackers cause system crashes, exploit requires hardware bus hang condition.
- 7.1 /10 HighCVE-2026-90372
Linux kernel mt76 mt7915 - Buffer Underflow
Linux kernel mt76 mt7915 contains a buffer underflow caused by improper handling of peer's VHT/HE MCS map with no supported spatial stream in mt7915_mcu_get_sta_nss, letting attackers cause potential data corruption, exploit requires crafted peer MCS map.