High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10425
- Critical
- 1916
- CISA KEV
- 79
- Public PoC
- 384
Most common types
- Broken Access Control 1290
- Privilege Escalation 1190
- Remote Code Execution 1111
- Authentication Bypass 835
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 380 of 568
- 8.8 /10 HighCVE-2026-90256 No auth
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in Bluetooth L2CAP due to unprotected access to l2cap_data in l2cap_disconn_ind, letting attackers cause memory corruption, exploit requires concurrent deletion of l2cap_conn.
- 8.8 /10 HighCVE-2026-90255
Linux kernel Bluetooth - Use After Free
Linux kernel Bluetooth component contains a use-after-free vulnerability caused by improper handling of SCO setup context lifetime in hci_conn, letting attackers cause memory corruption or denial of service, exploit requires Bluetooth connection manipulation.
- 7.1 /10 HighCVE-2026-90246 Auth required
Linux Kernel AppArmor - Integer Overflow
Linux kernel AppArmor contains an integer overflow in verify_tags() bounds check caused by 32-bit addition wraparound in tagset validation, letting attackers with CAP_MAC_ADMIN in nested namespaces cause out-of-bounds read, exploit requires CAP_MAC_ADMIN privilege.
- 7.8 /10 HighCVE-2026-90244 Auth required
Linux Kernel - Race Condition
Linux kernel iommu/dma contains a race condition caused by missing locking around msi_page_list in merged iommu domains, letting attackers cause data corruption, exploit requires concurrent device access in merged domain.
- 8.1 /10 HighCVE-2026-90243
Linux Kernel - Broken Authentication
Linux kernel contains a broken authentication caused by improper clearing of the Present bit before tearing down copied context entries in iommu/vt-d, letting hardware fetch torn entries causing unpredictable behavior or faults, exploit requires specific hardware conditions.
- 8.2 /10 HighCVE-2026-90241 Auth required
Linux Kernel - Use After Free
Linux kernel iommu/vt-d contains a use-after-free vulnerability caused by improper teardown of scalable-mode context entries on probe failure, letting attackers cause memory corruption, exploit requires device with dma_alias_mask.
- 8.8 /10 HighCVE-2026-90240
Linux Kernel - Use After Free
Linux kernel contains an IOMMU context cache invalidation flaw caused by incorrect source ID usage during DMA alias teardown, letting attackers cause use-after-free in IOMMU memory, exploit requires device DMA aliasing.
- 7.8 /10 HighCVE-2026-90237 Auth required
Linux Kernel netfilter nft_ct - Denial of Service
Linux kernel netfilter nft_ct contains a logic flaw in custom connection tracking expectation support caused by improper handling of confirmed and unconfirmed conntracks, letting attackers cause kernel crashes or stale state, exploit requires crafted network traffic.
- 7.5 /10 HighCVE-2026-90234 No auth
Linux Kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability caused by failure to properly return NFS delegations to the client, letting the server and client state become inconsistent, exploit requires NFS server and client interaction with delegation recalls.
- 8.4 /10 HighCVE-2026-90231 Auth required
Linux Kernel - Privilege Escalation
Linux kernel contains a privilege escalation caused by improper enforcement of unconfined user namespace restrictions in AppArmor stack transitions, letting unprivileged users escape confinement, exploit requires two transitions through an unconfined profile.
- 7.4 /10 HighCVE-2026-90229
Linux Kernel nvme-apple - Use After Free
Linux kernel nvme-apple contains a use-after-free caused by not destroying the admin queue on controller removal, letting attackers trigger kernel oops and panic, exploit requires controller failure and immediate teardown.
- 7.5 /10 HighCVE-2026-90228
Linux Kernel - Denial of Service
Linux kernel contains a NULL pointer dereference caused by improper handling of file-backed namespaces in nvmet_execute_identify_ns_zns(), letting remote attackers cause a denial of service by issuing specific Identify commands, exploit requires CONFIG_BLK_DEV_ZONED enabled and file-backed namespace.
- 7.8 /10 HighCVE-2026-90227 Auth required
Linux Kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability caused by NVME_IOCTL_SUBMIT_IO ioctl not checking command permissions with nvme_cmd_allowed(), letting unprivileged attackers perform unauthorized I/O on partition devices or write through read-only descriptors, exploit requires unprivileged access.
- 7.8 /10 HighCVE-2026-90225 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in NFC LLCP socket handling caused by reading llcp_sock->local outside the socket lock in getsockopt, letting attackers cause memory corruption, exploit requires concurrent getsockopt and bind calls.
- 7.5 /10 HighCVE-2026-90224
Linux Kernel - Race Condition
Linux kernel contains a race condition in NFC nci_data_exchange_complete caused by concurrent calls from nci_close_device() and nci_rx_work, letting attackers cause use-after-free and potential denial of service, exploit requires concurrent NFC operations.