High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10425
- Critical
- 1916
- CISA KEV
- 79
- Public PoC
- 384
Most common types
- Broken Access Control 1290
- Privilege Escalation 1190
- Remote Code Execution 1111
- Authentication Bypass 835
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 397 of 568
- 7.1 /10 HighCVE-2026-90017 No auth
Linux kernel rtl8723bs - Out-of-Bounds Read
Linux kernel staging rtl8723bs contains an out-of-bounds read caused by missing length check in rtw_action_frame_parse(), letting attackers cause memory read beyond buffer, exploit requires sending a short management action frame.
- 7.1 /10 HighCVE-2026-90016 No auth
Linux kernel rtl8723bs - Out-of-Bounds Read
Linux kernel staging rtl8723bs contains an out-of-bounds read caused by missing bounds check in rtw_restruct_wmm_ie() function while parsing WMM IE, letting attackers trigger OOB read via crafted association/scan data, exploit requires attacker to provide crafted IE buffer.
- 7.8 /10 HighCVE-2026-90014 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by show_event_filters and show_event_triggers files not taking a reference to the trace array, letting local attackers cause a crash, exploit requires reading these files.
- 7.8 /10 HighCVE-2026-90013 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in tracing options files caused by missing trace_array reference when opening options files, letting local tasks cause kernel crashes, exploit requires concurrent task interaction.
- 7.8 /10 HighCVE-2026-90010 Auth required
Linux Kernel - Out of Bounds Read/Write
Linux kernel scsi bsg contains a buffer overrun vulnerability caused by copying scmd->sense_len to user response buffer without honoring max_response_len, letting local attackers cause memory corruption, exploit requires local access.
- 7.8 /10 HighCVE-2026-90009
Linux Kernel - Time-of-Check to Time-of-Use (TOCTOU)
Linux kernel contains a time-of-check to time-of-use (TOCTOU) vulnerability in scsi bsg io_uring passthrough command setup caused by unsynchronized access to shared mmap'd SQE fields, letting attackers cause buffer overflow, exploit requires userspace to modify shared memory after validation.
- 7.8 /10 HighCVE-2026-90008 Auth required
Linux Kernel - Out of Bounds Read/Write
Linux kernel scsi megaraid_sas contains a buffer overrun vulnerability caused by unchecked PRP list size in megasas_make_prp_nvme, letting attackers cause memory corruption or kernel crash, exploit requires crafted large NVMe requests.
- 7.8 /10 HighCVE-2026-90007 Auth required
Linux kernel scsi pm8001 - Use After Free
Linux kernel scsi pm8001 contains a use-after-free caused by incorrect index usage in MSI-X vector rollback, letting attackers cause resource mismanagement, exploit requires kernel-level access.
- 7.8 /10 HighCVE-2026-90003 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in futex subsystem caused by race condition during FUTEX_CMP_REQUEUE_PI handling on PREEMPT_RT, letting local attackers cause kernel memory corruption, exploit requires concurrent futex operations.
- 7.8 /10 HighCVE-2026-90002 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by a race condition in ftrace_ops reference handling in trace instance files set_ftrace_filter and set_ftrace_notrace, letting attackers cause kernel crash, exploit requires concurrent rmdir and file open operations.
- 7.8 /10 HighCVE-2026-90001 Auth required
Linux Kernel - Race Condition
Linux kernel contains a race condition in HID bpf device reference release caused by unsynchronized access in struct_ops destroy path, letting concurrent paths double-free device references, exploit requires concurrent device destruction and BPF link release.
- 8.8 /10 HighCVE-2026-90000 No auth
Linux Kernel hid-rmi - Out-of-Bounds Read/Write
Linux kernel hid-rmi driver contains an out-of-bounds access vulnerability caused by undersized RMI reports leading to buffer overflows and information leaks, letting attackers cause memory corruption and leak heap contents, exploit requires a specially crafted device report descriptor.
- 8.1 /10 HighCVE-2026-89999
Linux Kernel - Out-of-Bounds Read
Linux kernel contains an out-of-bounds read vulnerability in HID wacom_intuos_pro2_bt_irq caused by lack of report length validation before parsing, letting attackers with malicious Bluetooth devices cause memory reads beyond buffer limits, exploit requires a paired or spoofed Bluetooth peripheral sending undersized reports.
- 7.8 /10 HighCVE-2026-89998 Auth required
Linux Kernel Device Mapper - Race Condition
Linux kernel device mapper contains a race condition caused by concurrent table load ioctls accessing dm->table_devices without proper locking, letting attackers cause invalid memory access, exploit requires concurrent ioctl calls.
- 7.8 /10 HighCVE-2026-89997
Linux Kernel Device Mapper - Use After Free
Linux kernel device mapper contains a race condition caused by simultaneous resume and remove ioctls, letting attackers cause use-after-free by resuming a device after suspension without postsuspend call, exploit requires concurrent ioctl calls.