High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 479 of 552
- 7.8 /10 HighCVE-2026-89507 Auth required
Linux Kernel RDMA/ucma - Denial of Service
Linux kernel RDMA/ucma contains a list corruption caused by improper locking in ucma_write_cm_event(), letting unprivileged users cause denial of service by wedging kernel mutex and corrupting event lists, exploit requires access to /dev/infiniband/rdma_cm device.
- 8.4 /10 HighCVE-2026-89504 No auth
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by premature of_node_put call in as3722_get_regulator_dt_data, letting attackers cause system instability or crashes, exploit requires access to vulnerable kernel component.
- 7.8 /10 HighCVE-2026-89503 Auth required
Linux Kernel - Race Condition
Linux kernel contains a race condition in ring_buffer_alloc_read_page() caused by concurrent subbuf_order changes, letting attackers cause memory allocation inconsistencies, exploit requires concurrent access to ring buffer.
- 7.8 /10 HighCVE-2026-89501 Auth required
Linux Kernel - Race Condition
Linux kernel contains a race condition in ring buffer resizing caused by improper locking in cpu_buffer, letting attackers cause data corruption or denial of service, exploit requires concurrent access to ring buffer.
- 7.8 /10 HighCVE-2026-89500
Linux Kernel - Denial of Service
Linux kernel contains a memory management vulnerability caused by mismatched page order handling in ring-buffer's cpu_buffer during concurrent resize, letting attackers cause kernel crashes or memory leaks, exploit requires concurrent ring buffer resize.
- 7.8 /10 HighCVE-2026-89499 Auth required
Linux Kernel - Race Condition
Linux kernel contains a race condition in ring-buffer remote reader update caused by improper handling of swap_reader_page callback failure, letting remote readers cause inconsistent page state, exploit requires event storm on small buffer.
- 7.8 /10 HighCVE-2026-89497 Auth required
Linux Kernel - Out of Bounds Read/Write
Linux kernel contains a buffer overflow caused by inconsistent handling of leading spaces in client debug mask parsing in orangefs_prepare_cdm_array(), letting attackers write past allocated buffer, exploit requires crafted client debug entry.
- 8.8 /10 HighCVE-2026-89493 Auth required
Linux Kernel ocfs2 - Out of Bounds Read & Write
Linux kernel ocfs2 contains an out-of-bounds read and write caused by missing validation of rl_used and rl_count fields in refcount block, letting local attackers with CAP_SYS_ADMIN mount crafted or corrupted images to cause memory corruption, exploit requires CAP_SYS_ADMIN privileges.
- 7.8 /10 HighCVE-2026-89489 Auth required
Linux Kernel - Broken Access Control
Linux kernel openrisc ABI < 244 contains an arbitrary kernel memory access vulnerability caused by unchecked user pointers in sys_or1k_atomic syscall, letting unprivileged attackers read/write kernel memory and execute code, exploit requires unprivileged process.
- 7.8 /10 HighCVE-2026-89488 Auth required
Linux Kernel openvswitch - Use After Free
Linux kernel openvswitch contains a use-after-free vulnerability caused by improper handling of CT limit state under RCU and ovs_mutex during netns teardown, letting unprivileged users trigger slab-use-after-free in ovs_ct_execute(), exploit requires user and network namespace access.
- 7.8 /10 HighCVE-2026-89487 Auth required
Linux Kernel openvswitch - Broken Access Control
Linux kernel openvswitch contains a broken access control vulnerability caused by improper handling of skb_tx_error() on packets still in use, letting unprivileged attackers perform unauthorized page-cache writes, exploit requires triggering specific packet flows with MSG_ZEROCOPY skb.
- 7.8 /10 HighCVE-2026-89486
Linux Kernel ipmi - Use After Free
Linux kernel ipmi contains a use-after-free vulnerability caused by missing synchronize_rcu() before freeing cmd_rcvr in _ipmi_destroy_user(), letting attackers cause memory corruption, exploit requires kernel-level access.
- 7.5 /10 HighCVE-2026-89483
Linux kernel nvme - Information Disclosure
Linux kernel nvme contains an uninitialized memory disclosure caused by fallback discard page not being zeroed in nvme_setup_discard, letting attackers with memory pressure conditions leak kernel memory, exploit requires memory pressure causing allocation failure.
- 7.5 /10 HighCVE-2026-89481
Linux Kernel nvme-tcp - Information Disclosure
Linux kernel nvme-tcp contains an information disclosure vulnerability caused by improper direction check in nvme_tcp_handle_r2t for read commands, letting malicious controllers read host memory, exploit requires malicious controller sending crafted R2T packets.
- 7.5 /10 HighCVE-2026-89480 No auth
Linux Kernel nvme-tcp - Data Integrity Vulnerability
Linux kernel nvme-tcp contains a data integrity vulnerability caused by improper validation of read byte count in nvme_tcp_recv_data(), letting attackers cause incomplete reads to be reported as complete, exploit requires malicious NVMe controller.