High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 13360
- Critical
- 2486
- CISA KEV
- 125
- Public PoC
- 437
Most common types
- Broken Access Control 1691
- Remote Code Execution 1609
- Privilege Escalation 1307
- Authentication Bypass 1121
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 634 of 725
- 8.5 /10 HighCVE-2026-57126 Auth required
PraisonAI praisonaiagents - Server Side Request Forgery
PraisonAI praisonaiagents < 1.6.58 contains a server side request forgery caused by improper hostname resolution in SpiderTools._validate_url, letting attackers bypass SSRF policy and access internal resources, exploit requires attacker-controlled hostname resolving to restricted IPs.
- 8.6 /10 HighCVE-2026-57122
PraisonAI - Authentication Bypass
PraisonAI < 4.6.59 contains a broken authentication caused by missing HMAC signature verification in WhatsApp and Linear bot webhook handlers, letting remote unauthenticated clients forge messages and disrupt bot processing, exploit requires access to webhook route.
- 7.5 /10 HighCVE-2026-57119 No auth
PraisonAI - Path Traversal
PraisonAI < 4.6.59 contains a path traversal caused by lack of workspace boundary checks in the unauthenticated Jobs API at POST /api/v1/runs, letting remote attackers access sensitive files, exploit requires no authentication.
- 7.3 /10 HighCVE-2026-56839 Auth required
PraisonAI - Path Traversal
PraisonAI < 4.6.59 contains a path traversal caused by uninitialized workspace root in CODE_TOOLS wrappers, letting attackers read and modify files outside intended directories, exploit requires application exposing code helpers before workspace set.
- 8.8 /10 HighCVE-2026-55416 Auth required
Pimcore - SQL Injection
Pimcore < 11.5.19, 12.3.10, and 2026.1.6 contains an SQL injection caused by improper sanitization of SQL fragments in Custom Reports configuration, letting authenticated users with reports_config permission manipulate database queries, exploit requires authenticated user with reports_config permission.
- 7.7 /10 HighCVE-2026-55253 Auth required
LangChain MongoDB - NoSQL Injection
LangChain MongoDB prior to langgraph-checkpoint-mongodb 0.3.0 and langgraph-store-mongodb 0.4.0 contains a NoSQL injection caused by improper filtering of keys prefixed with $ in filter dictionaries, letting authenticated attackers bypass tenant isolation and access other tenants' data, exploit requires authenticated caller controlling filter arguments.
- 7.5 /10 HighCVE-2026-55091 No auth
flat-to-nested - Prototype Pollution
flat-to-nested < 1.1.2 contains a prototype pollution caused by using attacker-controlled id and parent fields as keys in internal objects, letting attackers corrupt application logic or cause denial of service, exploit requires attacker-controlled input to convert().
- 8.5 /10 HighCVE-2026-55072 Auth required
Pimcore - SQL Injection
Pimcore < 2026.1.5 contains an SQL injection caused by incomplete validation of ClassDefinition UID in Block field loading, letting authenticated users with objects permission read or modify database tables.
- 7.5 /10 HighCVE-2026-54632
SIPSorcery - Denial of Service
SIPSorcery < 10.0.9 contains a denial of service caused by insufficient length checks in RTP and STUN attribute parsing, letting remote attackers terminate active RTP or WebRTC sessions by sending malformed packets, exploit requires access to ephemeral RTP/ICE port.
- 7.5 /10 HighCVE-2026-54629 No auth
Anyquery - Information Disclosure
Anyquery < 0.4.5 contains an information disclosure vulnerability caused by unauthenticated access to file-backed SQLite virtual table modules via MySQL-compatible server port, letting remote attackers read files accessible to the server process.
- 8.6 /10 HighCVE-2026-54628 No auth
Anyquery - Server Side Request Forgery
Anyquery < 0.4.5 contains a server-side request forgery caused by exposing URL-capable SQLite virtual table modules via unauthenticated MySQL-compatible port, letting remote attackers access internal network resources, exploit requires no authentication.
- 7.5 /10 HighCVE-2026-54567
Flask-Reuploaded - Unrestricted File Upload
Flask-Reuploaded 1.5.0 to <1.6.0 contains a file upload vulnerability caused by inconsistent extension case handling in UploadSet.save, letting attackers bypass lowercase denylist and upload executable files, exploit requires denylist configuration and user-controlled filename.
- 8.4 /10 HighCVE-2026-54447
GarminConnect - Information Disclosure
GarminConnect < 0.3.5 contains an information disclosure vulnerability caused by insecure file permissions on OAuth token directory and garmin_tokens.json, letting unprivileged users read tokens and access victim's Garmin Connect data, exploit requires shared host environment.
- 8.1 /10 HighCVE-2026-54182 No auth
Backpack CRUD - Command Injection
Backpack CRUD < 4.1.70, 5.6.2, 6.8.13, and 7.0.36 contains a command injection caused by unsanitized HTTP Host header used in exec() shell command in Backpack\CRUD\Stats::makeCurlRequest, letting unauthenticated attackers execute OS commands as web-server user, exploit requires reaching a 1-in-100 random gate.
- 7.6 /10 HighCVE-2026-54180 Auth required
Backpack/crud - Broken Access Control
Backpack/crud 6.0.0 to 6.8.14 and 7.0.38 contains a broken access control caused by unscoped model queries in Update, Delete, and Reorder operations, letting authenticated users modify out-of-scope records, exploit requires authentication.