High CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

High CVEs

Newest first · severity as published by the vendor or NVD · page 629 of 725

  • 7.5 /10 High
    CVE-2026-84543 PoC publicNo auth

    Apple macOS - Denial of Service

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain a denial of service caused by out-of-bounds access in SMB client, letting attackers cause system termination or kernel memory corruption, exploit requires connecting to a malicious SMB server.

  • 8.2 /10 High
    CVE-2026-84535 No auth

    Apple macOS - Broken Access Control

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain a broken access control caused by improper state management, letting sandboxed apps escape their sandbox, exploit requires app execution within sandbox.

  • 8.1 /10 High
    CVE-2026-84516 No auth

    Apple macOS - Out of Bounds Read

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain an out-of-bounds read caused by insufficient bounds checking when processing crafted files, letting attackers cause app termination or memory disclosure, exploit requires crafted file.

  • 7.8 /10 High
    CVE-2026-84515 Auth required

    Apple macOS - Out of Bounds Write

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain an out-of-bounds write caused by insufficient bounds checking in SMB client, letting attackers cause kernel memory corruption by connecting to a malicious SMB server.

  • 8.8 /10 High
    CVE-2026-84512 No auth

    Apple macOS - Buffer Overflow

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain a buffer overflow caused by insufficient bounds checking when mounting disk images, letting attackers cause system termination or kernel memory corruption, exploit requires mounting a crafted disk image.

  • 7.8 /10 High
    CVE-2026-84511 No auth

    Apple - Denial of Service

    Apple iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 contain an out-of-bounds write caused by improper bounds checking in asset catalog processing, letting attackers cause denial of service via process termination, exploit requires processing a malicious asset catalog.

  • 7.8 /10 High
    CVE-2026-84507 Auth required

    Apple - Race Condition

    Apple iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 contain a race condition caused by improper state handling, letting apps cause system termination or kernel memory corruption, exploit requires malicious app.

  • 7.8 /10 High
    CVE-2026-84506 Auth required

    Apple macOS - Use After Free

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain a use after free vulnerability caused by improper memory management, letting local apps execute arbitrary code with kernel privileges, exploit requires local app execution.

  • 7.8 /10 High
    CVE-2026-84505 Auth required

    Apple macOS - Privilege Escalation

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain a buffer overflow caused by insufficient bounds checking, letting local apps gain root privileges, exploit requires local app execution.

  • 7.8 /10 High
    CVE-2026-84497 No auth

    Apple - Buffer Overflow

    Apple iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, and visionOS 27 contain a buffer overflow caused by insufficient size validation when opening crafted files, letting attackers cause denial of service via process termination, exploit requires opening a malicious file.

  • 8.8 /10 High
    CVE-2026-82794 Auth required

    SolarView Compact - Command Injection

    SolarView Compact contains a command injection caused by improper input handling in Schedule Settings, letting logged-in attackers execute arbitrary OS commands.

  • 7.2 /10 High
    CVE-2026-82793 Auth required

    Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit - Unrestricted File Upload

    Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit contains an unrestricted file upload vulnerability caused by lack of file type restrictions, letting remote authenticated attackers execute arbitrary code.

  • 8.8 /10 High
    CVE-2026-82791 Auth required

    Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit - OS Command Injection

    Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit contains an OS command injection caused by improper neutralization of special elements in OS commands, letting logged-in attackers execute arbitrary OS commands.

  • 8.8 /10 High
    CVE-2026-82789 Auth required

    CONPROSYS HMI System - Expression Language Injection

    CONPROSYS HMI System contains an expression language injection caused by improper neutralization of directives in dynamically evaluated code, letting logged-in attackers execute arbitrary code.

  • 8.8 /10 High
    CVE-2026-82780 Auth required

    CONPROSYS TM Series - Unrestricted File Upload

    CONPROSYS TM Series contains an unrestricted file upload vulnerability caused by lack of file type restrictions, letting remote authenticated attackers execute arbitrary commands, exploit requires authentication.