High CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

High CVEs

Newest first · severity as published by the vendor or NVD · page 406 of 556

  • 7.7 /10 High
    CVE-2026-91943 Auth required

    Crawl4AI - Server-Side Request Forgery

    Crawl4AI < 0.9.3 contains a server-side request forgery caused by _get_pdf_path() re-downloading targets without egress validation in PDFContentScrapingStrategy, letting authenticated attackers access internal services and exfiltrate data.

  • 7.5 /10 High
    CVE-2026-91941 No auth

    Crawl4AI - Denial of Service

    Crawl4AI < 0.9.3 contains a denial of service caused by uncontrolled resource consumption in PDFContentScrapingStrategy, letting untrusted clients exhaust disk, CPU, and bandwidth by downloading large remote PDFs, exploit requires attacker to select PDF scraping strategy in POST requests.

  • 7.5 /10 High
    CVE-2026-91940 PoC publicNo auth

    crawl4ai - Arbitrary File Write

    crawl4ai < 0.9.3 contains an arbitrary file write vulnerability caused by improper validation of untrusted configuration fields in PDFContentScrapingStrategy, letting attackers write arbitrary files, exploit requires crafted config bodies.

  • 7.1 /10 High
    CVE-2026-91938 Auth required

    Flowise - Server-Side Request Forgery

    Flowise < 3.1.4 contains a server-side request forgery caused by bypassing SSRF protection in Cheerio, Playwright, and Puppeteer document loader nodes, letting attackers fetch internal and cloud metadata URLs, exploit requires attacker to provide arbitrary URLs.

  • 7.5 /10 High
    CVE-2026-91937 No auth

    Flowise - NoSQL Injection

    Flowise before 3.1.4 contains a NoSQL injection caused by unsanitized overrideConfig.sessionId parameter in MongoDBMemory node, letting unauthenticated attackers read other users' chat history via prediction API.

  • 8.3 /10 High
    CVE-2026-91935 Auth required

    Flowise - Open Redirect

    Flowise < 3.1.4 contains an open redirect caused by improper validation of baseURL parameters in chat-model nodes, letting authenticated users with specific permissions redirect requests to arbitrary hosts, exploit requires chatflows:create or chatflows:update permissions.

  • 8.8 /10 High
    CVE-2026-91934 Auth required

    Flowise - Broken Access Control

    Flowise < 3.1.4 contains a file write vulnerability caused by improper validation of file paths in the SQL Database Chain node when connecting to SQLite databases, letting authenticated attackers write arbitrary files, exploit requires authentication.

  • 7.1 /10 High
    CVE-2026-91933 Auth required

    Flowise - Broken Access Control

    Flowise < 3.1.4 contains a broken access control caused by missing workspace-level authorization checks in openai-realtime endpoints, letting authenticated users access and execute tools from other workspaces by supplying unscoped chatflowid.

  • 8.5 /10 High
    CVE-2026-91932 Auth required

    Flowise - Remote Code Execution

    Flowise < 3.1.4 contains a validation bypass vulnerability in MCP server configuration caused by unvalidated cwd parameter, letting authenticated attackers execute remote code by bypassing path validation with crafted args.

  • 8.5 /10 High
    CVE-2026-91931 Auth required

    Flowise - Remote Code Execution

    Flowise < 3.1.4 contains a remote code execution caused by improper validation of npx package names in the Custom MCP node's mcpServerConfig parameter, letting authenticated attackers execute arbitrary code on the server.

  • 7.5 /10 High
    CVE-2026-91930 Auth required

    Flowise - Broken Access Control

    Flowise < 3.1.4 contains a broken access control vulnerability caused by insufficient tenant isolation in organizationuser and workspace APIs, letting authenticated users gain administrative access by supplying arbitrary organization IDs.

  • 7.1 /10 High
    CVE-2026-91929 Auth required

    Flowise - Broken Access Control

    Flowise < 3.1.4 contains a broken access control caused by missing resource ownership verification in Enterprise endpoints, letting attackers with Enterprise access delete workspaces, modify roles, and abuse SSO secrets.

  • 8.8 /10 High
    CVE-2026-91925 Auth required

    Polyaxon - Remote Code Execution

    Polyaxon through 2.16.4 contains a remote code execution caused by unsandboxed Jinja2 environment rendering operation specification fields during server-side run preparation, letting authenticated users execute arbitrary code remotely, exploit requires user authentication.

  • 8.5 /10 High
    CVE-2026-91924 Auth required

    pgweb - Broken Access Control

    pgweb <= 0.17.0 contains a broken access control caused by unguarded POST /api/connect endpoint when connect-backend authorization is configured, letting attackers supply arbitrary database connection strings to access unauthorized databases and internal services, exploit requires no special privileges.

  • 7.7 /10 High
    CVE-2026-91923 Auth required

    KubeSphere - Server-Side Request Forgery

    KubeSphere through 4.1.3 contains a server-side request forgery caused by unvalidated URLs in the git credential verification endpoint, letting authenticated attackers reach internal services and exfiltrate credentials, exploit requires authentication.