High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 474 of 552
- 8.2 /10 HighCVE-2026-89665 No auth
Linux Kernel - Improper Input Validation
Linux kernel contains a vulnerability in NFSv2 SETATTR/CREATE where out-of-range useconds values cause time value corruption due to integer overflow in sattr decoder, letting remote attackers cause improper time attribute handling, exploit requires crafted NFSv2 requests.
- 7.5 /10 HighCVE-2026-89664 No auth
Linux Kernel NFSd - Resource Leak
Linux kernel contains a resource leak vulnerability in NFS server (nfsd) caused by missing release of OPEN-decoded POSIX ACLs in nfsd4 operations, letting attackers cause resource leaks, exploit requires sending malformed OPEN compound requests with valid POSIX ACL attributes.
- 8.8 /10 HighCVE-2026-89663 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in nfsd revoke paths caused by improper handling of copy-notify stateids references, letting attackers cause memory corruption or kernel crashes, exploit requires concurrent revoke and state management operations.
- 7.5 /10 HighCVE-2026-89657 No auth
Linux Kernel libceph - Denial of Service
Linux kernel libceph contains a denial of service caused by improper validation of OSD extent maps in osd_sparse_read(), letting malicious authenticated Ceph OSD peers crash kernel Ceph clients via malformed sparse-read replies, exploit requires authenticated malicious OSD peer.
- 7.5 /10 HighCVE-2026-89648
Linux Kernel Ceph - Denial of Service
Linux kernel Ceph contains a denial of service caused by unbounded delegated inode count handling in ceph_parse_deleg_inos(), letting a malicious or compromised MDS cause resource exhaustion, exploit requires attacker to control MDS.
- 7.5 /10 HighCVE-2026-89647 No auth
Linux Kernel - Denial of Service
Linux kernel contains a denial of service caused by a busy loop in ceph_trim_dentries() due to repeated re-queuing when no progress is possible, letting attackers cause high CPU usage, exploit requires no special privileges.
- 7.8 /10 HighCVE-2026-89646 Auth required
Linux Kernel Ceph - Broken Access Control
Linux kernel contains a broken access control vulnerability in Ceph where leaked inode references occur on writeback abort during umount, caused by failure to release wrbuffer claims, letting attackers cause inode eviction failure, exploit requires umount operation.
- 7.8 /10 HighCVE-2026-89641 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in cifs_file_set_size() caused by improper handling of tcon after cifsFileInfo_put(), letting attackers cause memory corruption or denial of service, exploit requires writable file handle.
- 7.1 /10 HighCVE-2026-89640 Auth required
Linux Kernel - Data Tampering & Denial of Service
Linux kernel contains a vulnerability in cifs_remap_file_range() caused by loff_t underflow when len is 0, letting attackers cause file range corruption, exploit requires crafted FSCTL_DUPLICATE_EXTENTS_TO_FILE request.
- 7.1 /10 HighCVE-2026-89639 Auth required
Linux Kernel - Cache Invalidation Issue in CIFS Truncate
Linux kernel contains a cache invalidation issue in cifs_do_truncate() caused by improper cache handling without i_rwsem, letting attackers cause stale cached data to be served, exploit requires file truncation with O_TRUNC flag.
- 7.8 /10 HighCVE-2026-89638 Auth required
Linux Kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability caused by improper clearing of setuid/setgid bits on write with cifsacl/modefromsid/posix extensions, letting attackers retain setuid/setgid bits unexpectedly, exploit requires usage of affected CIFS mount options.
- 8.2 /10 HighCVE-2026-89632 No auth
Linux Kernel smb client - Use-After-Check
Linux kernel contains a use-after-check vulnerability in smb client reparse_buf_ptr() caused by reading ReparseDataLength before validating buffer length, letting remote attackers cause memory corruption, exploit requires crafted server response.
- 8.8 /10 HighCVE-2026-89626 No auth
Linux Kernel HID Sensor Custom - Resource Cleanup Misconfiguration
Linux kernel HID sensor custom driver contains a resource cleanup flaw caused by incomplete sysfs group removal on failure in hid_sensor_custom_add_attributes(), letting attackers potentially cause resource leaks or instability, exploit requires kernel interaction with custom sensor fields.
- 7.8 /10 HighCVE-2026-89624 Auth required
Linux Kernel HID universal_pidff - Use After Free
Linux kernel HID universal_pidff contains a use-after-free vulnerability caused by not stopping the device when force-feedback initialization fails, letting attackers cause memory corruption, exploit requires a device with PID usage page and no input reports.
- 7.8 /10 HighCVE-2026-89622
Linux kernel HID mcp2221 - Use After Free
Linux kernel HID mcp2221 contains a use-after-free caused by not clearing the rxbuf pointer after I2C/SMBus transfer completion, letting attackers cause memory corruption via delayed device reports, exploit requires device interaction.