High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10425
- Critical
- 1916
- CISA KEV
- 79
- Public PoC
- 384
Most common types
- Broken Access Control 1290
- Privilege Escalation 1190
- Remote Code Execution 1111
- Authentication Bypass 835
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 402 of 568
- 8.1 /10 HighCVE-2026-89861 No auth
Linux Kernel qla2xxx - Use After Free
Linux kernel scsi qla2xxx contains a use-after-free vulnerability caused by dropping vport_slock before using vp in qla24xx_report_id_acquisition, letting attackers cause memory corruption, exploit requires local access.
- 8.8 /10 HighCVE-2026-89860
Linux Kernel qla2xxx - Denial of Service
Linux kernel scsi qla2xxx contains a denial of service caused by reinitializing work_struct in abort_work leading to workqueue corruption and crashes, letting attackers cause system crashes, exploit requires triggering multiple aborts on the same command.
- 8.4 /10 HighCVE-2026-89856
Linux Kernel qla2xxx - Integer Overflow
Linux kernel qla2xxx driver contains an integer truncation vulnerability caused by improper clamping of MSI-X derived queue counts, letting attackers cause memory corruption or kernel crash, exploit requires a misconfigured or malicious hot-plugged device.
- 7.8 /10 HighCVE-2026-89854
Linux kernel qla2xxx - Use After Free
Linux kernel scsi qla2xxx contains a use-after-free caused by dereferencing freed ha->cs84xx during host teardown, letting attackers cause memory corruption or denial of service, exploit requires concurrent sysfs attribute read during teardown.
- 8.8 /10 HighCVE-2026-89849
Linux Kernel qla2xxx - Denial of Service
Linux kernel qla2xxx driver contains a wild pointer dereference caused by improper handling of non-SCSI SRB types in the status IOCB fast path, letting attackers cause denial of service, exploit requires crafted firmware input.
- 8.1 /10 HighCVE-2026-89848
Linux Kernel qla2xxx - Use After Free
Linux kernel qla2xxx driver contains a use-after-free vulnerability caused by improper ordering of request and response queue deletion, letting attackers trigger a use-after-free via response interrupts, exploit requires triggering response interrupts during queue deletion.
- 8.8 /10 HighCVE-2026-89844 No auth
Linux Kernel qla2xxx - Race Condition
Linux kernel scsi qla2xxx contains a race condition caused by missing vport_slock during host map update in report ID acquisition, letting attackers cause data structure corruption, exploit requires concurrent host_map updates.
- 7.8 /10 HighCVE-2026-89841
Linux kernel f2fs - Denial of Service
Linux kernel f2fs contains a bug caused by improper handling of folio references in redirty_blocks, letting attackers cause a bad page state leading to potential denial of service, exploit requires readahead to populate page cache.
- 7.1 /10 HighCVE-2026-89840
Linux kernel f2fs - Broken Access Control
Linux kernel contains a broken access control vulnerability in f2fs where F2FS_IOC_MOVE_RANGE does not validate destination size properly, letting attackers cause destination inode overflow, exploit requires ability to invoke MOVE_RANGE ioctl.
- 7.1 /10 HighCVE-2026-89838 Auth required
Linux kernel F2FS - Information Disclosure
Linux kernel F2FS contains an information disclosure caused by improper handling of non-NUL-terminated recovery filenames in recovery logging, letting attackers read beyond filename buffer, exploit requires local access.
- 7.8 /10 HighCVE-2026-89836 Auth required
Linux Kernel f2fs - Race Condition
Linux kernel f2fs contains a race condition caused by calling folio_nr_pages() after dropping folio reference in large folio invalidate, letting attackers cause livelock and stale xarray entries, exploit requires concurrent folio operations.
- 7.8 /10 HighCVE-2026-89832
Linux Kernel - Data Tampering
Linux kernel contains a data tampering vulnerability in f2fs caused by failure to clear dirty flag on folio in error path, letting attackers persist corrupted node block data, exploit requires kernel-level access.
- 7.8 /10 HighCVE-2026-89829
Linux Kernel - Data Integrity & Denial of Service
Linux kernel contains a logic flaw in f2fs_sanity_check_node_footer due to incorrect nid checking caused by not passing folio->index, letting attackers potentially cause data integrity issues, exploit requires local access.
- 7.1 /10 HighCVE-2026-89826 Auth required
Linux Kernel - Buffer Overflow
Linux kernel contains a buffer overflow caused by integer overflow in drm/panthor firmware build-info bounds checks, letting attackers trigger out-of-bounds reads, exploit requires crafted firmware image.
- 7.8 /10 HighCVE-2026-89825 Auth required
Linux kernel drm/panthor - Out of Bounds Read/Write
Linux kernel drm/panthor contains a bounds check vulnerability caused by improper 32-bit arithmetic in firmware control interface offset validation, letting attackers potentially cause out-of-bounds access, exploit requires crafted firmware with malicious offsets.