High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10425
- Critical
- 1916
- CISA KEV
- 79
- Public PoC
- 384
Most common types
- Broken Access Control 1290
- Privilege Escalation 1190
- Remote Code Execution 1111
- Authentication Bypass 835
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 383 of 568
- 7.5 /10 HighCVE-2026-90102 No auth
Linux Kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability in NFSv4/pnfs due to improper caching of data server versions, letting attackers cause null pointer dereference and connection issues, exploit requires use of flexfiles with mixed NFS versions on same address.
- 7.8 /10 HighCVE-2026-90093 Auth required
Linux kernel Bluetooth L2CAP - Use After Free
Linux kernel Bluetooth L2CAP contains a use-after-free vulnerability caused by unsafe access to chan->conn in get/setsockopt, letting local attackers cause kernel crashes, exploit requires local access.
- 8.0 /10 HighCVE-2026-90092 Auth required
Linux Kernel Bluetooth L2CAP - Use After Free
Linux kernel Bluetooth L2CAP contains a use-after-free caused by race conditions and improper socket state handling in l2cap_sock_new_connection_cb and l2cap_sock_teardown_cb, letting attackers cause memory corruption, exploit requires concurrent connection attempts.
- 8.0 /10 HighCVE-2026-90091 Auth required
Linux Kernel Bluetooth L2CAP - Race Condition
Linux kernel Bluetooth L2CAP contains a race condition caused by unsafe lockless read in l2cap_sock_cleanup_listen() accessing l2cap_pi(sk)->chan concurrently with l2cap_sock_kill(), letting attackers cause null pointer dereference and potential denial of service, exploit requires concurrent socket operations.
- 7.1 /10 HighCVE-2026-90089 No auth
Linux kernel Bluetooth btnxpuart - Buffer Validation
Linux kernel Bluetooth btnxpuart contains a buffer validation vulnerability caused by missing length checks on the firmware dump header in nxp_process_fw_dump(), letting attackers cause early dump termination or read beyond buffer, exploit requires crafted truncated frames.
- 7.8 /10 HighCVE-2026-90071 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in net/sched sch_teql due to failure to restore skb->dev on slave transmit failure, letting attackers cause kernel memory corruption, exploit requires crafted network packets.
- 7.8 /10 HighCVE-2026-90069 Auth required
Linux Kernel - Out of Bounds Write
Linux kernel contains a buffer overflow caused by insufficient allocation size in acomp_request_clone for async crypto requests, letting attackers cause out-of-bounds writes, exploit requires kernel-level access.
- 7.5 /10 HighCVE-2026-90067 No auth
Linux kernel libceph - Denial of Service
Linux kernel libceph contains a protocol validation vulnerability caused by improper validation of the Ceph messenger v2 banner payload length, letting remote clients trigger kernel warnings or crashes by sending a banner with payload_len less than 16 bytes, exploit requires network access to Ceph messenger service.
- 7.1 /10 HighCVE-2026-90062 Auth required
Linux Kernel - Misconfiguration
Linux kernel contains a misconfiguration in netfilter nf_tables offload sequence, causing inconsistent state between hardware and software rulesets, letting attackers potentially cause denial of service, exploit requires crafted network traffic.
- 7.5 /10 HighCVE-2026-90059 No auth
Linux kernel net: stmmac - Denial of Service
Linux kernel net: stmmac contains a misaligned memory access vulnerability caused by missing NET_IP_ALIGN in RX DMA offset, letting attackers cause kernel panic on ARM32 architectures, exploit requires network packet reception.
- 7.8 /10 HighCVE-2026-90057 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in slip_receive_buf() caused by concurrent execution of slip_hangup() and slip_close(), letting attackers cause memory corruption, exploit requires racing against tty hangup.
- 7.8 /10 HighCVE-2026-90052 Auth required
Linux kernel dm-integrity - Buffer Overflow
Linux kernel dm-integrity contains a buffer overflow caused by writing a checksum past the end of the allocated buffer in integrity_metadata during keyed discard operations, letting attackers cause memory corruption, exploit requires crafted discard operations.
- 7.8 /10 HighCVE-2026-90051
Linux Kernel - Denial of Service
Linux kernel contains a vulnerability in tcp_sendmsg_locked where devmem tcp tx is not properly enforced without zero-copy, causing potential data copy errors and invariant breaks, letting attackers cause denial of service, exploit requires crafted io_uring requests with dmabuf_id and zero-copy flags.
- 8.8 /10 HighCVE-2026-89036 Auth required
Appwrite - Command Injection
Appwrite before 2.0.0 contains a command injection caused by improper sanitization of the providerRootDirectory parameter in GNU tar commands, letting authenticated users with specific permissions execute arbitrary commands.
- 8.8 /10 HighCVE-2026-88904 Auth required
PuppyFW WordPress plugin - Broken Access Control
PuppyFW WordPress plugin through 0.4.4 contains a broken access control caused by improper authorization on a REST route, letting any authenticated user escalate privileges by modifying blog options.