High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 484 of 552
- 7.8 /10 HighCVE-2026-81006
Linux kernel ipmi - Use After Free
Linux kernel ipmi contains a use-after-free vulnerability caused by incomplete sysfs file removal on ipmi_add_smi registration failure, letting attackers cause system instability or denial of service, exploit requires triggering registration failure.
- 8.4 /10 HighCVE-2026-81004
Linux Kernel - Race Condition
Linux kernel contains a race condition in IPMI message handler caused by improper cancellation of scheduled work on error during IPMI interface startup, letting attackers cause resource mismanagement, exploit requires triggering IPMI interface startup error.
- 8.1 /10 HighCVE-2026-81003 No auth
Linux Kernel - Broken Access Control
Linux kernel contains an AF_IUCV socket binding vulnerability caused by lack of ingress device verification in afiucv_hs_rcv(), letting attackers inject data, exhaust accept queues, or spoof peers across network namespaces, exploit requires sending crafted frames on the same HiperSockets segment.
- 7.8 /10 HighCVE-2026-81001 Auth required
Linux Kernel slip - Use After Free
Linux kernel slip driver contains a use-after-free vulnerability caused by race conditions in slip_devs[] handling during device teardown and synchronization, letting local attackers cause memory corruption, exploit requires concurrent slip device open/close operations.
- 7.8 /10 HighCVE-2026-81000 PoC publicAuth required
Linux Kernel net tun - Buffer Overflow
Linux kernel net tun driver contains a buffer overflow caused by improper handling of skb headroom and alignment in tun_get_user(), letting attackers cause memory corruption, exploit requires crafted oversized headroom request.
- 7.5 /10 HighCVE-2026-80998 No auth
Linux kernel net: bnxt - Denial of Service
Linux kernel net: bnxt contains a denial of service caused by missing doorbell ringing on early exit in SW USO path, letting attackers cause TX queue stalls, exploit requires sending burst packets triggering early return.
- 7.5 /10 HighCVE-2026-80997 No auth
Linux Kernel - Denial of Service
Linux kernel contains a denial of service caused by improper handling of the modem TX queue during runtime resume in net: ipa component, letting attackers cause permanent transmit stalls, exploit requires device runtime suspend/resume cycles.
- 7.8 /10 HighCVE-2026-80995 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in the MCTP network component caused by improper reference handling of route device in mctp_route_lookup(), letting unprivileged local AF_MCTP users cause memory corruption, exploit requires local access.
- 7.8 /10 HighCVE-2026-80994 Auth required
Linux Kernel openvswitch - Use After Free
Linux kernel openvswitch contains a use-after-free vulnerability caused by improper RCU locking order during flow deletion in flow mask handling, letting attackers cause kernel crashes, exploit requires network access to trigger flow deletion.
- 7.8 /10 HighCVE-2026-80992 Auth required
Linux Kernel net: ravb - Denial of Service
Linux kernel net: ravb contains a null pointer dereference caused by querying PTP clock index before first open or registration failures, letting attackers cause denial of service, exploit requires triggering clock query before initialization.
- 7.8 /10 HighCVE-2026-80991 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by a race condition between ravb_ptp_interrupt() and ravb_ptp_stop() in PTP clock teardown, letting attackers cause memory corruption, exploit requires triggering PTP clock events.
- 8.8 /10 HighCVE-2026-80989 No auth
Linux kernel net thunderbolt - Denial of Service
Linux kernel net thunderbolt contains a logic flaw in tbnet_connected_work() where connection state is not properly cleared on failure, causing repeated teardown and resource mismanagement, letting attackers cause system warnings or crashes, exploit requires network interaction.
- 7.5 /10 HighCVE-2026-80987 No auth
Linux Kernel - Denial of Service
Linux kernel contains a denial of service caused by improper handling of oversized TX buffers in ntb_transport, letting attackers cause resource leaks, exploit requires sending oversized buffers.
- 8.2 /10 HighCVE-2026-80985
Linux Kernel - Data Tampering & Denial of Service
Linux kernel contains a vulnerability in net/smc where oversized SMC-Rv2 LLC messages are improperly handled in smc_llc_rmt_delete_rkey() and smc_llc_save_add_link_rkeys(), letting attackers cause unintended rkey deletions and modifications, exploit requires crafted SMC-Rv2 LLC messages on a shared v2 receive buffer link.
- 7.8 /10 HighCVE-2026-80982 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in net/smc due to improper locking in smc_rx_pipe_buf_release(), letting attackers cause memory corruption or denial of service, exploit requires concurrent socket close and receive operations.