High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10425
- Critical
- 1916
- CISA KEV
- 79
- Public PoC
- 384
Most common types
- Broken Access Control 1290
- Privilege Escalation 1190
- Remote Code Execution 1111
- Authentication Bypass 835
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 379 of 568
- 7.8 /10 HighCVE-2026-90317
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in BPF caused by invalid RCU pointer handling after final spin unlock, letting attackers trigger task_struct use-after-free, exploit requires capability-limited runtime.
- 7.8 /10 HighCVE-2026-90316
Linux Kernel drm/omap dsi - Use After Free
Linux kernel drm/omap dsi contains a use-after-free caused by copying the ISR table leading to stack-allocated objects being freed during IRQ unregistration, letting attackers cause memory corruption, exploit requires IRQ unregistration during handling.
- 7.8 /10 HighCVE-2026-90312 Auth required
Linux Kernel - Type Confusion
Linux kernel contains a type confusion vulnerability in BPF load-acquire operations caused by improper source pointer type validation, letting attackers access raw kernel objects, exploit requires BPF program with specific load-acquire instructions.
- 7.8 /10 HighCVE-2026-90309 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in RDMA/erdma due to improper CQ reference handling in EQ event processing, letting attackers cause memory corruption or denial of service, exploit requires triggering EQ events.
- 7.8 /10 HighCVE-2026-90308 Auth required
Linux Kernel RDMA/erdma - Use After Free
Linux kernel RDMA/erdma contains a use-after-free vulnerability caused by improper reference handling of QPs in AE and CM processing, letting attackers cause resource corruption or denial of service, exploit requires kernel-level access.
- 8.1 /10 HighCVE-2026-90301
Linux kernel ocfs2 o2hb - Use After Free
Linux kernel ocfs2 o2hb contains a use-after-free vulnerability caused by improper lifecycle management of heartbeat region handlers and delayed works, letting attackers cause memory corruption or kernel crash, exploit requires local code execution or specific kernel interaction.
- 7.5 /10 HighCVE-2026-90294 No auth
Linux Kernel IB/isert - Denial of Service
Linux kernel IB/isert contains a null pointer dereference caused by sending the final Login Response before session registration in isert_put_login_tx(), letting remote attackers cause a kernel oops and denial of service, exploit requires sending a SCSI command immediately after login response.
- 7.5 /10 HighCVE-2026-90293 No auth
Linux Kernel IB/isert - Race Condition
Linux kernel IB/isert contains a race condition caused by posting full-feature receive buffers before session registration, letting initiators execute SCSI commands against uninitialized sessions, exploit requires initiator to send commands before final Login Response.
- 7.8 /10 HighCVE-2026-90292 Auth required
Linux Kernel RDMA/siw - Use After Free
Linux kernel RDMA/siw contains a use-after-free vulnerability caused by improper reference handling in siw_accept(), letting attackers cause memory corruption, exploit requires crafted QP in RTS state.
- 7.8 /10 HighCVE-2026-90291 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by improper lifecycle management of kmod_dup_req instances in module/dups, letting local attackers cause memory corruption, exploit requires concurrent access to kmod_dup_req.
- 7.8 /10 HighCVE-2026-90289
CVE-2026-90289
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Resize MST HDCP per-connector arrays to 32 AMDGPU_DM_MAX_DISPLAY_INDEX is 31. It suggest a maximum number of 32 connectors. But the way it's used is like MAX_DISPLAY_COUNT. Hence we're off by one with DRM core, which supports a max of 32 connectors. Rename AMDGPU_DM_MAX_DISPLAY_INDEX to AMDGPU_DM_MAX_DISPLAY_COUNT to match its actual use, and increase the size to 32 to match the originally intended size.
- 7.4 /10 HighCVE-2026-90288 No auth
Linux kernel phy renesas rcar-gen2 - Use After Free
Linux kernel phy renesas rcar-gen2 contains a double free vulnerability caused by redundant of_node_put call on phy creation failure, letting kernel processes cause memory corruption, exploit requires kernel code execution.
- 8.8 /10 HighCVE-2026-90286
CVE-2026-90286
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx6: Use PFP on the compute queues too On GFX6, the compute rings use the same CP path as the graphics ring. The only difference is that they don't support draw commands. (As opposed to GFX7 and newer which have a separate command parser that is called MEC for compute queues.) This means that we have to take into consideration that the PFP also exists on compute queues on GFX6: Use PFP for register writes on both graphics and compute queues. In the pipeline sync, use the PFP to wait for the previous fence (and not the ME) to prevent the PFP from starting to execute the next submission while the ME is still in the previous submission. After a VM flush, emit PFP_SYNC_ME on compute queues as well.
- 8.1 /10 HighCVE-2026-90268
Linux Kernel - Resource Management Error Handling
Linux kernel contains a resource management vulnerability caused by improper error handling in sd_probe() after large pool creation failure in scsi disk device registration, letting attackers cause resource leaks, exploit requires local access.
- 7.1 /10 HighCVE-2026-90260 Auth required
Linux Kernel btrfs - Memory Corruption
Linux kernel btrfs zoned filesystem contains a memory corruption vulnerability caused by zeroing out extent buffer folios in btree_csum_one_bio(), letting attackers corrupt extent tree metadata, exploit requires use of zoned filesystems with specific write patterns.