High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 477 of 552
- 7.1 /10 HighCVE-2026-89571 Auth required
Linux Kernel - Out of Bounds Read & Denial of Service
Linux kernel contains a buffer overflow caused by improper bounds checking of fwctl command payload in cxl/features, letting attackers cause out-of-bounds memory read and kernel crash, exploit requires crafted fwctl command with manipulated op_size.
- 7.8 /10 HighCVE-2026-89570 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by improper lifetime management of the CXL MCE notifier in cxl/mce, letting attackers trigger NULL dereferences and use-after-free in the MCE handler, exploit requires specific hardware with CXL regions having extended linear cache.
- 8.8 /10 HighCVE-2026-89569 No auth
Linux Kernel Bluetooth RFCOMM - Use After Free
Linux kernel Bluetooth RFCOMM contains a use-after-free vulnerability caused by unsynchronized access to session and DLC lists in rfcomm_security_cfm(), letting local attackers cause memory corruption, exploit requires concurrent session teardown.
- 7.8 /10 HighCVE-2026-89564 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by orphaning prefetched skbs before multicast forwarding, letting attackers cause kernel memory corruption or denial of service, exploit requires multicast packet forwarding.
- 7.8 /10 HighCVE-2026-89563 Auth required
Linux Kernel - Use After Free
Linux kernel ip6_tunnel contains a memory management flaw in ip6_tnl_xmit() caused by improper skb headroom expansion using skb_realloc_headroom(), letting kernel components potentially free stale skb pointers, exploit requires kernel-level interaction.
- 7.8 /10 HighCVE-2026-89562 Auth required
Linux Kernel ip6_gre - Misconfiguration
Linux kernel ip6_gre contains a vulnerability caused by incorrect hardware header length calculation in NBMA tunnels, letting attackers potentially cause network issues, exploit requires specific tunnel configurations.
- 7.5 /10 HighCVE-2026-89561 No auth
Linux Kernel - Denial of Service
Linux kernel contains a NULL pointer dereference vulnerability in ipv6_rpl_srh_rcv() caused by missing NULL check on idev from __in6_dev_get(), letting attackers cause kernel crash via MTU flapping and ping6 traffic, exploit requires network access to affected interface.
- 8.4 /10 HighCVE-2026-89560 Auth required
Linux Kernel - Broken Access Control
Linux kernel contains a permission control vulnerability in Landlock where whiteout creation in OverlayFS was improperly guarded, allowing unprivileged users to create whiteout objects without proper LANDLOCK_ACCESS_FS_MAKE_REG permission, exploit requires userspace access to OverlayFS whiteout creation.
- 7.8 /10 HighCVE-2026-89559
Linux Kernel libnvdimm - Integer Overflow
Linux kernel libnvdimm contains an integer overflow caused by 32-bit multiplication wraparound in __nd_label_validate(), letting attackers trigger out-of-bounds write via crafted nslot value, exploit requires untrusted input from medium or userspace.
- 7.8 /10 HighCVE-2026-89557
Linux Kernel - Integer Overflow
Linux kernel contains an integer overflow caused by lack of overflow check on sb->bblog_shift in super_1_load(), letting attackers trigger overflow in badblocks_set() via crafted superblock, exploit requires crafted on-disk superblock.
- 8.2 /10 HighCVE-2026-89554 No auth
Linux Kernel - Memory Corruption
Linux kernel contains a memory corruption vulnerability caused by uninitialized local_id in syncookie MP_JOIN reconstruction, letting off-path attackers corrupt subflow bookkeeping, exploit requires sending concurrent MP_JOIN SYNs.
- 7.8 /10 HighCVE-2026-89553 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by a race condition between info ioctl vma lookup and gem close path in nouveau/gem, letting attackers cause memory corruption, exploit requires race condition timing.
- 7.5 /10 HighCVE-2026-89549 No auth
Linux Kernel - Denial of Service
Linux kernel contains a denial of service caused by svc_pool_for_cpu() routing to threadless pools in sunrpc, letting attackers cause connection hangs indefinitely, exploit requires specific nfsd thread configuration.
- 7.8 /10 HighCVE-2026-89548 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in SUNRPC due to improper handling of cache_cleaner delayed_work during cache_detail destruction, letting attackers cause memory corruption, exploit requires kernel-level access.
- 8.1 /10 HighCVE-2026-89547 No auth
Linux Kernel - Broken Authentication
Linux kernel contains a broken authentication caused by unchecked percpu_counter allocation failure in SUNRPC svc pool initialization, letting local administrators cause memory corruption and kernel instability, exploit requires local admin privileges under memory pressure.