High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 486 of 552
- 7.8 /10 HighCVE-2026-80947 Auth required
Linux kernel rtl8xxxu - Use After Free
Linux kernel rtl8xxxu driver contains a use-after-free vulnerability caused by improper cancellation of rx_urb_wq worker during device stop, letting attackers cause memory corruption or system instability, exploit requires active RX traffic followed by device disconnect.
- 7.8 /10 HighCVE-2026-80944 Auth required
Linux Kernel mwifiex - Denial of Service
Linux kernel mwifiex driver contains a stack corruption vulnerability caused by late firmware responses writing through stale stack-backed data buffers after interrupted wait_event_interruptible_timeout calls, letting attackers cause kernel panic and memory corruption, exploit requires repeated association/disassociation cycles.
- 7.6 /10 HighCVE-2026-80943 No auth
Linux Kernel rtlwifi - Out-of-Bounds Read/Write
Linux kernel wifi rtlwifi rtl8192du contains an out-of-bounds array indexing vulnerability caused by unchecked QoS TID indexing in rtl92du_tx_fill_desc(), letting attackers potentially cause memory corruption or denial of service, exploit requires crafted network packets.
- 8.8 /10 HighCVE-2026-80937
Linux Kernel - Out-of-Bounds Write
Linux kernel contains a buffer overflow caused by unchecked device-controlled EEPROM address in mt7915_mcu_get_eeprom(), letting malicious devices perform out-of-bounds writes, exploit requires malicious or malfunctioning device.
- 7.8 /10 HighCVE-2026-80936
Linux kernel mt76 mt7925 - Use After Free
Linux kernel mt76 mt7925 contains a use-after-free caused by not cancelling delayed mlo_pm_work during device stop, letting attackers cause kernel warnings or crashes, exploit requires device teardown during power-save setup.
- 8.8 /10 HighCVE-2026-80935
Linux Kernel mt76 - Out-of-Bounds Write
Linux kernel mt76 mt7996 contains an out-of-bounds write vulnerability caused by unbounded device EEPROM address in mt7996_mcu_get_eeprom(), letting malicious devices write beyond eeprom.data, exploit requires malicious or malfunctioning device.
- 7.8 /10 HighCVE-2026-80933
Linux kernel mt76 - Out of Bounds Read
Linux kernel mt76 mt7996 driver contains a buffer overflow caused by lack of length validation of default EEPROM firmware, letting attackers cause out-of-bounds read, exploit requires supplying truncated firmware file.
- 8.4 /10 HighCVE-2026-80932 No auth
Linux Kernel virtio_vsock - Use After Free
Linux kernel virtio_vsock contains a use-after-free vulnerability caused by improper flushing order of dependent work items in virtio_vsock_remove(), letting attackers cause memory corruption or system instability, exploit requires kernel-level access.
- 7.8 /10 HighCVE-2026-80931
Linux Kernel w1: ds28e17 - Out of Bounds Read
Linux kernel w1: ds28e17 contains a buffer overflow caused by improper length validation in I2C block read, letting a malicious device cause out-of-bounds read, exploit requires a malicious I2C slave device.
- 7.8 /10 HighCVE-2026-80929 Auth required
Linux Kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability caused by improper placement of the "cad_pid" sysctl entry in pid_table[], allowing non-root users to modify it via unshared pid/user namespaces, exploit requires namespace unsharing.
- 7.8 /10 HighCVE-2026-80928 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in smack_file_send_sigiotask() caused by improper access to task credentials, letting attackers cause memory corruption, exploit requires triggering specific task credential inspection.
- 8.3 /10 HighCVE-2026-80469 No auth
Device Driver Package - Remote Code Execution
A device driver package upload mechanism contains a code execution vulnerability caused by bypassing driver verification, letting attackers execute arbitrary code, exploit requires user interaction.
- 7.5 /10 HighCVE-2026-79394 No auth
Xiongmai IP Camera XM530 - Authentication Bypass
Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier contains an authentication bypass caused by insecure default configuration in the embedded Happytime RTSP server within Sofia IPC daemon, letting remote unauthenticated attackers access live video and audio feeds in cleartext over unencrypted RTP/UDP, exploit requires no authentication.
- 7.5 /10 HighCVE-2026-79393 No auth
Xiongmai IP Camera XM530 - Buffer Overflow
Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier contains a heap-based buffer overflow caused by improper handling of wsa5:Action string in WS-Addressing Action transformation function in Sofia IPC daemon, letting remote unauthenticated attackers cause denial of service or execute arbitrary code via crafted SOAP request.
- 8.8 /10 HighCVE-2026-79362 Auth required
Woltlab WCF - Remote Code Execution
Woltlab WCF >= 6.1.0 < 6.1.23 and >= 6.2.0 < 6.2.6 contain a remote code execution caused by cache poisoning via premature nowdoc termination in executable cache files, letting authenticated low-privileged users execute arbitrary PHP code.