High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10425
- Critical
- 1916
- CISA KEV
- 79
- Public PoC
- 384
Most common types
- Broken Access Control 1290
- Privilege Escalation 1190
- Remote Code Execution 1111
- Authentication Bypass 835
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 396 of 568
- 8.8 /10 HighCVE-2026-92122 Auth required
Jenkins Script Security Plugin - Sandbox Bypass
Jenkins Script Security Plugin <= 1415.v9a_f9b_3a_c253d contains a sandbox bypass caused by improper method checking in proxy creation when coercing values to interfaces, letting attackers with script execution permission run arbitrary code in Jenkins controller JVM, exploit requires permission to define and run sandboxed scripts.
- 8.1 /10 HighCVE-2026-92087
@fastify/auth - Authentication Bypass
@fastify/auth 5.0.0 through 5.1.0 contains an authentication bypass caused by order-dependent evaluation of nested AND groups with 'or' relation and 'all' run option, letting attackers with partial valid credentials gain unauthorized access, exploit requires crafted strategy composition.
- 7.8 /10 HighCVE-2026-90047
Linux Kernel drm/xe - Misconfiguration
Linux kernel drm/xe contains a memory mismanagement vulnerability caused by rounding up the flat CCS storage offset instead of rounding down, letting the compression hardware overwrite VRAM memory, causing system instability, exploit requires specific hardware and conditions.
- 7.8 /10 HighCVE-2026-90046 Auth required
Linux Kernel - Privilege Escalation
Linux kernel contains a privilege escalation vulnerability caused by unsafe use of spin_trylock() in NMI context on UP systems in mm/page_alloc component, letting local attackers crash the kernel and escalate privileges, exploit requires BPF programs running in NMI on non-SMP builds.
- 7.8 /10 HighCVE-2026-90045 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by improper mm_struct lifetime handling in USB gadget ffs async requests, letting attackers cause memory corruption, exploit requires task exit before completion.
- 7.8 /10 HighCVE-2026-90044
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in usb gadget f_fs due to a race condition in AIO error path in ffs_epfile_write_iter() and ffs_epfile_read_iter(), letting attackers cause memory corruption, exploit requires concurrent AIO cancel operation.
- 7.8 /10 HighCVE-2026-90043
Linux kernel zram - Broken Access Control
Linux kernel zram contains a broken access control caused by incorrect slot lock bit position on big-endian 64-bit systems, letting concurrent CPUs cause lock state corruption, exploit requires specific architecture and configuration.
- 8.8 /10 HighCVE-2026-90041
Linux Kernel HID sony - Use After Free
Linux kernel HID sony driver contains a use-after-free vulnerability caused by improper cleanup of device list nodes on probe failure, letting attackers cause memory corruption, exploit requires triggering probe failure.
- 7.8 /10 HighCVE-2026-90032 Auth required
Linux Kernel usbtv - Use After Free
Linux kernel media usbtv contains a use-after-free vulnerability caused by premature freeing of struct usbtv during USB disconnect, letting attackers cause memory corruption, exploit requires open ALSA PCM file during disconnect.
- 7.8 /10 HighCVE-2026-90030
Linux Kernel usb: dwc3 - Denial of Service
Linux kernel usb: dwc3 contains a vulnerability caused by setting forceRM=1 during EndTransfer command on DWC_usb31 v2.00a and v2.10a controllers, letting attackers trigger SMMU faults due to aborted transfers remaining active, exploit requires use of affected hardware controllers.
- 7.8 /10 HighCVE-2026-90027 Auth required
Linux kernel usb: typec: qcom-pmic-typec - Use After Free
Linux kernel usb: typec: qcom-pmic-typec contains a use-after-free caused by delayed work running after device resource is freed, letting attackers cause system instability or crash, exploit requires kernel interaction with USB Type-C port.
- 7.8 /10 HighCVE-2026-90026
Linux kernel usb: typec: qcom-pmic - Use After Free
Linux kernel usb: typec: qcom-pmic contains a use-after-free caused by pending reset_work running after device removal, letting attackers cause system instability or crash, exploit requires triggering IRQ handler timing.
- 7.7 /10 HighCVE-2026-90025
Linux Kernel usb typec ucsi displayport - Denial of Service
Linux kernel usb typec ucsi displayport driver contains an out-of-bounds array index vulnerability caused by improper validation of GET_CURRENT_CAM response, letting attackers cause kernel crash, exploit requires invalid GET_CURRENT_CAM response from PPM.
- 7.8 /10 HighCVE-2026-90022 Auth required
Linux kernel usb gadget f_midi2 - Use After Free
Linux kernel usb gadget f_midi2 contains a use-after-free vulnerability caused by dereferencing freed string pointers outside of locks in string attribute show path, letting attackers cause memory corruption or denial of service, exploit requires concurrent attribute write.
- 8.8 /10 HighCVE-2026-90018 No auth
Linux kernel rtl8723bs - Buffer Overflow
Linux kernel staging rtl8723bs contains a stack buffer overflow and heap out-of-bounds read caused by missing length validation in rtw_get_wps_attr() when parsing WPS attributes in wireless management frames, letting remote attackers via crafted WPS IE in beacon or probe response cause stack corruption, exploit requires crafted wireless management frames.