High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10425
- Critical
- 1916
- CISA KEV
- 79
- Public PoC
- 384
Most common types
- Broken Access Control 1290
- Privilege Escalation 1190
- Remote Code Execution 1111
- Authentication Bypass 835
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 382 of 568
- 8.1 /10 HighCVE-2026-90153 Auth required
Linux Kernel ksmbd - Broken Access Control
Linux kernel ksmbd contains a broken access control vulnerability caused by improper bounds checking in smb_check_perm_dacl() ACE walks, letting attackers bypass access control by placing ACEs beyond declared DACL size, exploit requires crafted DACL.
- 7.5 /10 HighCVE-2026-90149 No auth
Linux Kernel - Denial of Service
Linux kernel contains a NULL dereference vulnerability in NFSv4/flexfiles caused by improper handling of NFSv4.0 data servers without sessions, letting attackers cause kernel oops during I/O operations, exploit requires use of NFSv4.0 data servers.
- 7.8 /10 HighCVE-2026-90146 Auth required
Linux Kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability caused by missing offload checks in bpf_xdp_link_update() allowing users to swap XDP programs improperly, letting attackers bypass intended program restrictions, exploit requires ability to create or update XDP links.
- 7.1 /10 HighCVE-2026-90145 Auth required
Linux Kernel hinic3 - Out-of-Bounds Read & Data Corruption
Linux kernel hinic3 contains an out-of-bounds read and packet corruption vulnerability caused by stale skb fragment count and ignored skb_checksum_help() errors in hinic3_send_one_skb(), letting attackers cause IOMMU faults or transmit corrupted packets, exploit requires crafted tunnel packets.
- 7.8 /10 HighCVE-2026-90143
Linux Kernel - Broken Authentication
Linux kernel contains a broken authentication caused by missing RCU read lock in kcm_parse_func_strparser during BPF parser execution, letting attackers trigger kernel warnings and potential instability, exploit requires kernel-level code execution.
- 7.8 /10 HighCVE-2026-90142
Linux Kernel virtio_net - Buffer Overflow
Linux kernel contains a buffer overflow caused by improper resizing of the RX ring in virtio_net when an AF_XDP socket is attached, letting attackers cause out-of-bounds write, exploit requires AF_XDP socket usage.
- 7.3 /10 HighCVE-2026-90141 No auth
Linux Kernel - Integer Overflow
Linux kernel contains an integer overflow in ipvs ftp helper port/address parsing caused by unchecked accumulation of decimal digits, letting attackers craft FTP responses with truncated port/address, exploit requires crafted FTP PASV/EPSV response.
- 7.7 /10 HighCVE-2026-90137
Linux kernel - Out of Bounds Read
Linux kernel platform/x86 hp-bioscfg contains an out-of-bounds read caused by insufficient bounds checking in password encoding parsing, letting attackers with malformed ACPI packages cause memory access violations, exploit requires crafted ACPI package.
- 7.8 /10 HighCVE-2026-90133 No auth
Linux Kernel ntfs - Out of Bounds Write
Linux kernel ntfs subsystem contains a heap out-of-bounds write caused by lack of bounds checking in ntfs_ir_to_ib() when copying index_root entries, letting attackers trigger memory corruption via crafted filesystem images, exploit requires crafted filesystem.
- 7.1 /10 HighCVE-2026-90132 Auth required
Linux Kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability caused by unprivileged users being able to write to reserved $LX* extended attributes in NTFS, letting attackers modify reserved xattrs, exploit requires CAP_SYS_ADMIN privileges.
- 7.1 /10 HighCVE-2026-90131 Auth required
Linux Kernel ntfs - Race Condition
Linux kernel ntfs subsystem contains a race condition caused by lack of serialization of resident iomap reads with mrec_lock, letting attackers cause data races leading to potential data corruption, exploit requires concurrent link/unlink operations.
- 8.4 /10 HighCVE-2026-90120 No auth
Linux Kernel - Out of Bounds Read/Write
Linux kernel contains a memory corruption vulnerability caused by unchecked get_logical_index() return value in irqchip/gic-v5 MADT IAFFID parsing, letting attackers cause out-of-bounds memory corruption, exploit requires kernel interaction with specific MADT entries.
- 7.8 /10 HighCVE-2026-90118 No auth
Linux Kernel - Out-of-Bounds Write
Linux kernel contains an off-by-one page overflow in ntfs_decompress() caused by improper boundary check, letting attackers trigger out-of-bounds writes when reading corrupted compressed $DATA attributes, exploit requires crafted corrupted NTFS data.
- 7.8 /10 HighCVE-2026-90111 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in ip6mr_cache_report() caused by cloning a freed dst entry in IPv6 multicast routing, letting attackers cause memory corruption, exploit requires multicast packet triggering unresolved MFC lookup.
- 7.5 /10 HighCVE-2026-90103
Linux Kernel NFSv4.2 - Denial of Service
Linux kernel NFSv4.2 contains a buffer exhaustion vulnerability caused by insufficient send buffer size in LAYOUTSTATS encoding, letting malicious NFS servers cause denial of service by exhausting buffer and locking resources, exploit requires malicious NFS server.