High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10425
- Critical
- 1916
- CISA KEV
- 79
- Public PoC
- 384
Most common types
- Broken Access Control 1290
- Privilege Escalation 1190
- Remote Code Execution 1111
- Authentication Bypass 835
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 404 of 568
- 7.8 /10 HighCVE-2026-89793 Auth required
Linux Kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability caused by failure to clear VM_MAYWRITE on read-only ublk char device mmap, letting unprivileged userspace daemons escalate write permissions on read-only mappings, exploit requires unprivileged daemon access.
- 7.1 /10 HighCVE-2026-89792 Auth required
Linux kernel - Out of Bounds Read
Linux kernel contains an out-of-bounds read vulnerability caused by improper validation of IPC share configuration payload sizes in ksmbd, letting attackers cause memory corruption or denial of service, exploit requires crafted IPC share config payload.
- 7.8 /10 HighCVE-2026-89791 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in perf mmap() caused by a race condition between perf_mmap() revival and the last munmap(), letting local unprivileged users escalate privileges to root, exploit requires local access.
- 7.8 /10 HighCVE-2026-89789 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in gtp_newlink() caused by freeing tid_hash and addr_hash without waiting for RCU grace period, letting attackers cause memory corruption via concurrent gtp_encap_recv(), exploit requires triggering error path.
- 8.4 /10 HighCVE-2026-89782 No auth
Linux kernel fs/ntfs3 - Use After Free
Linux kernel fs/ntfs3 contains a use-after-free vulnerability caused by improper handling of restart table growth beyond U16_MAX entries during $LogFile replay, letting attackers cause out-of-bounds memory access, exploit requires mounting a crafted NTFS image.
- 8.4 /10 HighCVE-2026-89781 No auth
Linux Kernel - Out-of-Bounds Read
Linux kernel contains an out-of-bounds read vulnerability in fs/ntfs3 read_log_rec_buf() caused by unchecked offset from on-disk restart area, letting attackers with crafted NTFS images cause memory corruption during log replay, exploit requires mounting a crafted NTFS image.
- 8.8 /10 HighCVE-2026-89777 Auth required
Linux Kernel vfio/pci - Use After Free
Linux kernel vfio/pci contains a use-after-free vulnerability caused by a dangling pointer in vdev->msi_perm after init failure, letting attackers cause kernel crashes or execute arbitrary code, exploit requires device open failure condition.
- 8.8 /10 HighCVE-2026-89774 No auth
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in Bluetooth SCO caused by improper socket reference handling in sco_conn_ready and sco_get_sock_listen, letting attackers cause memory corruption, exploit requires local access.
- 7.5 /10 HighCVE-2026-89063 No auth
Bookly WordPress Plugin - Broken Access Control
Bookly WordPress plugin <= 28.1 contains an insecure direct object reference caused by missing validation on 'conversation_id' parameter, letting unauthenticated attackers read and inject messages into any AI booking conversation, exploit requires no authentication.
- 7.5 /10 HighCVE-2026-89028 No auth
MikroTik RouterOS - Heap Memory Corruption
MikroTik RouterOS < 7.24 contains a heap memory corruption vulnerability caused by an integer underflow in the SMB1 SessionSetupAndX handler's uniPwdLen field, letting remote attackers corrupt adjacent heap memory, exploit requires crafted SMB1 request.
- 7.5 /10 HighCVE-2026-88263 No auth
XikeStor Layer3 Switches - Authentication Bypass
XikeStor Layer3 switches contain an authentication bypass caused by missing authentication for downloading configuration data, letting unauthenticated attackers retrieve sensitive network configurations and passwords, exploit requires no authentication.
- 8.8 /10 HighCVE-2026-88064 Auth required
Backstage @backstage/plugin-techdocs-node - Remote Code Execution
Backstage @backstage/plugin-techdocs-node < 1.14.6 and 1.15.0 to < 1.15.4 contains a remote code execution caused by insufficient validation of mkdocs.yml by authenticated users who can register or modify TechDocs sources, letting attackers execute code within the TechDocs backend or build container, exploit requires authenticated user with TechDocs source modification privileges.
- 8.1 /10 HighCVE-2026-87976 Auth required
Apache NiFi Registry - Path Traversal
Apache NiFi Registry 0.4.0 through 2.11.0 contains a path traversal caused by improper validation of group, artifact, and version coordinates in uploaded NAR manifests, letting authenticated users with write/delete bundle permissions perform file operations outside the intended directory.
- 8.8 /10 HighCVE-2026-87105 Auth required
Tanium Threat Response - SQL Injection
Tanium Threat Response contains a sql injection caused by improper input sanitization, letting attackers execute arbitrary SQL commands, exploit requires crafted input.
- 7.2 /10 HighCVE-2026-87024 Auth required
Tanium Asset - SQL Injection
Tanium Asset contains a sql injection vulnerability, letting attackers execute arbitrary SQL commands, exploit requires crafted input.