High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10425
- Critical
- 1916
- CISA KEV
- 79
- Public PoC
- 384
Most common types
- Broken Access Control 1290
- Privilege Escalation 1190
- Remote Code Execution 1111
- Authentication Bypass 835
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 390 of 568
- 8.1 /10 HighCVE-2026-26950 Auth required
Dell SmartFabric Manager - Privilege Escalation
Dell SmartFabric Manager < 2.2.1 contains an insufficient verification of data authenticity vulnerability, letting low privileged remote attackers elevate their privileges, exploit requires remote access.
- 7.4 /10 High
- 7.8 /10 HighCVE-2026-25290 Auth required
Unknown - Memory Corruption
Unknown product contains a memory corruption vulnerability caused by improper validation of large data buffers using addition to check buffer length, letting attackers cause memory corruption, exploit requires crafted large data buffers.
- 7.3 /10 HighCVE-2026-25284
undefined - Information Disclosure
undefined contains an information disclosure caused by use-after-free of a pointer, letting attackers disclose sensitive information, exploit requires undefined conditions.
- 8.8 /10 HighCVE-2026-25283
CVE-2026-25283
Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size.
- 7.9 /10 HighCVE-2026-25282 Auth required
Generic Product - Denial of Service
A product contains a denial of service caused by out of bound memory access when processing unverified data from a neighboring system, letting attackers cause transient denial of service, exploit requires network access.
- 7.4 /10 HighCVE-2026-25281 No auth
Generic Software - Denial of Service
Affected software contains a denial of service caused by insufficient memory allocation validation when processing large or numerous request buffers, letting attackers cause transient denial of service, exploit requires crafted requests.
- 7.8 /10 HighCVE-2026-25280
CVE-2026-25280
Memory corruption when processing escape handling flow with insufficient user buffer sizes.
- 7.8 /10 HighCVE-2026-25278 Auth required
Generic I2C - Memory Corruption
A memory corruption vulnerability exists due to a race condition between memory allocation and data copying when processing I2C transfer requests, letting attackers cause memory corruption remotely, exploit requires crafted I2C requests.
- 7.5 /10 HighCVE-2026-25275 No auth
Unknown Product - Denial of Service
Affected product contains a denial of service caused by processing authentication frames with invalid FILS information element header lengths, letting attackers cause transient service disruption, exploit requires crafted authentication frames.
- 7.4 /10 HighCVE-2026-24081
Bluetooth - Denial of Service
A Bluetooth implementation contains a denial of service caused by processing a channel map with insufficient used channels when adaptive frequency hopping is fully enabled, letting attackers cause transient service disruption, exploit requires adaptive frequency hopping enabled.
- 7.8 /10 HighCVE-2026-24075
Device Control Handler - Race Condition
A device control handler contains a memory corruption vulnerability caused by improper synchronization and race conditions when multiple threads issue concurrent IOCTL requests, letting attackers cause memory corruption, exploit requires concurrent IOCTL requests.
- 7.8 /10 HighCVE-2026-24074
CVE-2026-24074
Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.
- 7.8 /10 HighCVE-2026-24073
Unknown - Memory Corruption
Unknown product contains a memory corruption vulnerability caused by insufficient validation of offset against structure size during decode statistics processing, letting attackers cause memory corruption, exploit requires unspecified conditions.
- 7.8 /10 HighCVE-2026-19477 No auth
MCC Universal Library for Linux (uldaq) - Buffer Overflow
MCC Universal Library for Linux (uldaq) <= 1.2.1 contains a stack-based buffer overflow caused by improper bounds checking, letting attackers execute arbitrary code or disclose information, exploit requires crafted input.