High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10425
- Critical
- 1916
- CISA KEV
- 79
- Public PoC
- 384
Most common types
- Broken Access Control 1290
- Privilege Escalation 1190
- Remote Code Execution 1111
- Authentication Bypass 835
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 400 of 568
- 7.8 /10 HighCVE-2026-89922
CVE-2026-89922
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Take srcu when importing watchpoint data __import_wp_info() backs up the original guest memory contents of a watchpoint with read_guest_abs(), which is kvm_read_guest() and therefore resolves the memslot via __kvm_memslots(). That requires kvm->srcu (or kvm->slots_lock) to be held, otherwise a concurrent memslot update can free the memslots array under us once its SRCU grace period has elapsed. As this is not fast path, following lock ordering (mutex first, then srcu) take the big hammer and hold the srcu for the full import.
- 7.8 /10 HighCVE-2026-89920
Linux Kernel KVM s390 - Memory Corruption
Linux kernel KVM s390 contains a memory corruption vulnerability caused by reinjecting CK machine checks into the guest, letting attackers cause memory corruption, exploit requires use of KVM on s390 architecture.
- 7.8 /10 HighCVE-2026-89919 Auth required
Linux Kernel KVM s390 - Race Condition
Linux kernel KVM s390 contains a race condition caused by missing mmu_lock usage when reading gmap->asce in keyop, letting attackers cause memory corruption, exploit requires concurrent keyop and gmap_set_limit execution.
- 8.8 /10 HighCVE-2026-89913
Linux Kernel KVM arm64 - Use After Free
Linux kernel KVM arm64 vgic-v3 contains a race condition caused by dereferencing LPI pointers without stable references in vgic_v3_save_pending_tables, letting attackers cause use-after-free and memory corruption, exploit requires concurrent access to LPI structures.
- 7.1 /10 HighCVE-2026-89912 No auth
Linux Kernel KVM - Denial of Service
Linux kernel KVM arm64 vgic-its contains a null pointer dereference caused by improper handling of ITE collection on ITT save, letting a guest trigger host crash during migration, exploit requires guest VM access.
- 7.9 /10 HighCVE-2026-89911 Auth required
Linux Kernel KVM arm64 - Denial of Service
Linux kernel KVM arm64 contains a vulnerability caused by improper capping of TLB Invalidation by Range, letting guest attackers cause overflow by encoding large ranges, exploit requires running guest VM.
- 7.3 /10 HighCVE-2026-89910
Linux Kernel - Undefined Behavior & Denial of Service
Linux kernel contains an uninitialized stack variable issue in KVM LoongArch dmsintc_inject_irq function, letting attackers potentially cause undefined behavior or denial of service, exploit requires local access.
- 8.8 /10 HighCVE-2026-89908
Linux Kernel KVM - Memory Region Flags Preservation
Linux kernel KVM on LoongArch contains a memory region flags preservation vulnerability caused by improper handling of memslot arch flags during KVM_MR_FLAGS_ONLY updates, letting attackers cause incorrect memory mappings, exploit requires KVM_MR_FLAGS_ONLY update.
- 8.8 /10 HighCVE-2026-89907 Auth required
Linux Kernel - Memory Corruption
Linux kernel contains a memory corruption vulnerability in LoongArch KVM due to lack of validation of MSI data before routing to EIOINTC, letting attackers with VM fd corrupt kernel memory, exploit requires VM fd access.
- 7.8 /10 HighCVE-2026-89906 Auth required
Linux Kernel - Denial of Service
Linux kernel contains a logic error in BPF jump offset calculation for LoongArch architecture, caused by stale prior-pass code stride usage, letting attackers cause soft lockups, exploit requires BPF program execution.
- 8.4 /10 HighCVE-2026-89904
Linux Kernel - Buffer Overflow
Linux kernel contains an array overflow caused by improper sizing of acpi_package_ids[] in LoongArch virt machine with PPTT ACPI table, letting attackers cause memory corruption, exploit requires specific hardware configuration.
- 7.8 /10 HighCVE-2026-89903 Auth required
Linux kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability in LoongArch rethook trampoline caused by saving and restoring percpu base register across CPU migrations, letting attackers cause scheduler and timer corruption under heavy kretprobe load, exploit requires kretprobe usage on LoongArch.
- 7.8 /10 HighCVE-2026-89902 Auth required
Linux Kernel - Privilege Escalation
Linux kernel contains a preempt count underflow vulnerability in LoongArch caused by improper handling of break 11 instruction in kprobe_singlestep_handler, letting attackers bypass socket cgroup policies, exploit requires triggering a userspace breakpoint.
- 7.8 /10 HighCVE-2026-89899
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in the media CEC subsystem caused by improper handling of delayed work cancellation in cec_transmit_msg_fh(), letting attackers cause kernel memory corruption, exploit requires signal interruption during transmit.
- 8.8 /10 HighCVE-2026-89898 No auth
Linux kernel media cec extron-da-hd-4k-plus - Denial of Service
Linux kernel media cec extron-da-hd-4k-plus contains a buffer overflow vulnerability caused by lack of sanity check on incoming data, letting attackers cause denial of service by sending malformed data.