High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10425
- Critical
- 1916
- CISA KEV
- 79
- Public PoC
- 384
Most common types
- Broken Access Control 1290
- Privilege Escalation 1190
- Remote Code Execution 1111
- Authentication Bypass 835
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 399 of 568
- 8.8 /10 HighCVE-2026-89960 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in s390/vfio-ap due to stale pqap_hook pointer in vfio_ap_mdev_set_kvm(), letting attackers cause memory corruption or system instability, exploit requires triggering specific error conditions in KVM instance assignment.
- 8.8 /10 HighCVE-2026-89959 Auth required
Linux Kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability caused by improper removal of control domains in vfio_ap_mdev_cfg_remove, letting attackers prevent unplugged control domains removal in KVM guests, exploit requires KVM guest access.
- 8.8 /10 HighCVE-2026-89957 Auth required
Linux Kernel - Logic Flaw in Hot-Unplug Handling
Linux kernel contains a logic flaw in s390/vfio-ap hot-unplug handling caused by improper bitmap_andnot() return value check, letting KVM guests retain stale hardware access to unplugged AP devices, exploit requires KVM guest with AP devices assigned.
- 8.0 /10 HighCVE-2026-89954 No auth
Linux kernel mtd:afs - Out of Bounds Read/Write
Linux kernel mtd:afs contains a buffer validation vulnerability caused by unchecked image information offset and region count in the AFS v2 parser, letting attackers cause memory corruption, exploit requires crafted flash contents.
- 8.8 /10 HighCVE-2026-89951 No auth
Linux kernel batman-adv - Use After Free
Linux kernel batman-adv contains a stale receive device vulnerability caused by reusing skb from deleted hard interfaces during fragment reassembly, letting attackers cause use-after-free and potential denial of service, exploit requires network packet injection.
- 8.0 /10 HighCVE-2026-89947 No auth
Linux Kernel - Out of Bounds Read
Linux kernel contains a global out-of-bounds read caused by a mismatch in the number of parents for gxbb_32k_clk_sel clock mux in the meson clk driver, letting local attackers cause memory corruption, exploit requires kernel-level access.
- 8.4 /10 HighCVE-2026-89943 No auth
Linux Kernel - Undefined Behavior
Linux kernel contains an undefined behavior vulnerability caused by ignoring the return value of device_property_read_string() in loongson_card_parse_acpi(), letting kernel code use uninitialized pointers, exploit requires kernel interaction with ACPI properties.
- 7.8 /10 HighCVE-2026-89942
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in the IIO buffer release function caused by improper mutex unlocking order, letting attackers cause memory corruption, exploit requires device removal or hot-unplug.
- 7.8 /10 HighCVE-2026-89941 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in iio_dma_fence caused by unsafe dma_fence release implementation, letting attackers cause memory corruption, exploit requires kernel-level access.
- 7.8 /10 HighCVE-2026-89940 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in iio_dma_fence caused by improper lock lifetime management in iio_dmabuf_priv, letting attackers cause memory corruption, exploit requires triggering fence release callbacks.
- 7.8 /10 HighCVE-2026-89938
Linux Kernel iio Chemical Atlas-sensor - Use After Free
Linux kernel iio chemical atlas-sensor contains a use-after-free caused by improper irq_work handling in the threaded IRQ handler, letting attackers cause memory corruption, exploit requires hardware IRQ triggering.
- 8.8 /10 HighCVE-2026-89932
Linux Kernel KVM - Information Disclosure
Linux kernel KVM nVMX contains a vulnerability caused by not flushing vpid02 on first use, letting attackers cause stale TLB entries to be used, potentially leading to information leakage or VM isolation bypass, exploit requires nested VMX usage with VMXOFF -> VMXON sequence.
- 8.8 /10 HighCVE-2026-89929
Linux Kernel KVM - Information Disclosure
Linux kernel KVM nested virtualization contains a logic flaw in INVVPID emulation causing TLB invalidation on incorrect physical CPU, letting attackers cause stale TLB entries, exploit requires nested virtualization and CPU migration.
- 8.8 /10 HighCVE-2026-89928
Linux Kernel KVM - Use After Free
Linux kernel KVM x86/mmu contains a use-after-free vulnerability caused by improper handling of lockless rmap walk in kvm_rmap_age_gfn_range, letting attackers cause memory corruption, exploit requires kernel configuration with CONFIG_KVM_MMU_LOCKLESS_AGING enabled.
- 7.1 /10 HighCVE-2026-89927 No auth
Linux Kernel KVM - Denial of Service
Linux kernel KVM x86 Hyper-V synthetic timer contains an integer overflow in stimer deadline calculation, letting guest or userspace cause CPU livelock and RCU stalls, exploit requires programming timer with large COUNT value.