High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 485 of 552
- 7.8 /10 HighCVE-2026-80979 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in net/smc due to improper connection unregistering and tasklet draining, letting attackers cause kernel memory corruption, exploit requires triggering specific network operations.
- 7.8 /10 HighCVE-2026-80978 Auth required
Linux Kernel - Buffer Overflow
Linux kernel contains a buffer overflow caused by uncapped advertised IP tunnel headroom derived from lower output devices, letting attackers cause skb header offset wrap, exploit requires crafted tunnel configuration.
- 7.8 /10 HighCVE-2026-80977
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in net subsystem caused by improper handling of shared zerocopy state in skb_tx_error(), letting attackers cause memory corruption or data tampering via cloned skb packets, exploit requires packet cloning in Open vSwitch.
- 7.8 /10 HighCVE-2026-80975 Auth required
Linux Kernel - Memory Corruption
Linux kernel contains a stack buffer overflow caused by use of an on-stack reply buffer in qnap_mcu_exec() that can be overwritten by late or unsolicited MCU messages, letting attackers cause memory corruption, exploit requires triggering command timeout.
- 7.8 /10 HighCVE-2026-80971 Auth required
Linux Kernel ALSA bcd2000 - Use After Free
Linux kernel ALSA bcd2000 contains a use-after-free vulnerability caused by freed URB pointers not being cleared on device disconnect, letting local attackers cause memory corruption or kernel crash, exploit requires device unplug during substream use.
- 8.4 /10 HighCVE-2026-80967 No auth
Linux Kernel ALSA pcxhr - Race Condition
Linux kernel ALSA pcxhr contains a race condition caused by initializing mutexes after requesting threaded IRQ, letting interrupts run against uninitialized mutexes, exploit requires race condition during device probe.
- 7.8 /10 HighCVE-2026-80962 Auth required
Linux Kernel dm-pcache - Out-of-Bounds Read & Write
Linux kernel dm-pcache contains an out-of-bounds read and write caused by unvalidated geometry fields from on-disk cache_info, letting attackers with CAP_SYS_ADMIN privileges cause memory corruption, exploit requires CAP_SYS_ADMIN.
- 7.8 /10 HighCVE-2026-80961 Auth required
Linux Kernel dm-pcache - Information Disclosure
Linux kernel dm-pcache contains an out-of-bounds read caused by improper validation of kset key_num and intra-segment bounds in cache_key_decode(), letting attackers with CAP_SYS_ADMIN leak adjacent persistent memory to user space, exploit requires CAP_SYS_ADMIN privilege.
- 7.8 /10 HighCVE-2026-80959 Auth required
Linux Kernel dm-pcache - Out of Bounds Read
Linux kernel dm-pcache contains a buffer overflow caused by unchecked segment offset in cache_pos_decode(), letting attackers with CAP_SYS_ADMIN privileges read past segment data, exploit requires CAP_SYS_ADMIN privileges.
- 7.1 /10 HighCVE-2026-80958
Linux kernel dm-pcache - Out of Bounds Read
Linux kernel dm-pcache contains a buffer over-read caused by improper bounds checking in tail kset read in cache_replay(), letting attackers potentially read beyond segment data, exploit requires local access.
- 7.8 /10 HighCVE-2026-80955 Auth required
Linux Kernel dm-pcache - Use After Free
Linux kernel dm-pcache contains a use-after-free vulnerability caused by accessing freed key memory in kset_replay(), letting attackers cause memory corruption or denial of service, exploit requires triggering stale key conditions.
- 7.8 /10 HighCVE-2026-80954 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode(), letting attackers cause memory corruption or system instability, exploit requires kernel-level access.
- 8.4 /10 HighCVE-2026-80953 No auth
Linux kernel i3c master adi - Race Condition
Linux kernel i3c master adi contains a race condition caused by initializing the lock after enabling interrupts in adi_i3c_master_probe(), letting interrupts access uninitialized lock, exploit requires interrupt triggering after IRQ unmasking.
- 7.8 /10 HighCVE-2026-80952
Linux Kernel i3c Master - Use After Free & Information Disclosure
Linux kernel i3c master contains an information leak and use-after-free caused by clearing device descriptor before device_unregister(), letting attackers leak kernel stack contents and cause use-after-free during device unregistration, exploit requires race condition during device unbind.
- 7.8 /10 HighCVE-2026-80950
Linux Kernel Renesas I3C - Use After Free
Linux kernel Renesas I3C driver contains a use-after-free vulnerability caused by accessing freed memory in the interrupt handler, letting attackers cause system crashes, exploit requires triggering interrupt after timeout.