High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 13360
- Critical
- 2486
- CISA KEV
- 125
- Public PoC
- 437
Most common types
- Broken Access Control 1691
- Remote Code Execution 1609
- Privilege Escalation 1307
- Authentication Bypass 1121
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 647 of 725
- 7.8 /10 HighCVE-2026-89670
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in nfsd_file objects due to missing RCU locking around cmpxchg in nfsd_open_local_fh, letting attackers cause memory corruption or denial of service, exploit requires local code execution.
- 7.8 /10 HighCVE-2026-89668 Auth required
Linux Kernel - Resource Management Issue
Linux kernel contains a resource management vulnerability caused by improper initialization order in nfsd_debugfs_init() and nfsd4_init_slabs(), letting kernel modules leave orphan debugfs files with stale pointers, exploit requires slab allocation failure.
- 8.1 /10 HighCVE-2026-89667 No auth
Linux Kernel - Race Condition
Linux kernel contains a race condition in nfsd filecache caused by improper synchronization of shrinker, GC worker, and fsnotify/lease callbacks with per-net shutdown, letting attackers cause resource leaks, exploit requires concurrent operations.
- 8.2 /10 HighCVE-2026-89665 No auth
Linux Kernel - Improper Input Validation
Linux kernel contains a vulnerability in NFSv2 SETATTR/CREATE where out-of-range useconds values cause time value corruption due to integer overflow in sattr decoder, letting remote attackers cause improper time attribute handling, exploit requires crafted NFSv2 requests.
- 7.5 /10 HighCVE-2026-89664 No auth
Linux Kernel NFSd - Resource Leak
Linux kernel contains a resource leak vulnerability in NFS server (nfsd) caused by missing release of OPEN-decoded POSIX ACLs in nfsd4 operations, letting attackers cause resource leaks, exploit requires sending malformed OPEN compound requests with valid POSIX ACL attributes.
- 8.8 /10 HighCVE-2026-89663 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in nfsd revoke paths caused by improper handling of copy-notify stateids references, letting attackers cause memory corruption or kernel crashes, exploit requires concurrent revoke and state management operations.
- 7.5 /10 HighCVE-2026-89657 No auth
Linux Kernel libceph - Denial of Service
Linux kernel libceph contains a denial of service caused by improper validation of OSD extent maps in osd_sparse_read(), letting malicious authenticated Ceph OSD peers crash kernel Ceph clients via malformed sparse-read replies, exploit requires authenticated malicious OSD peer.
- 7.5 /10 HighCVE-2026-89648
Linux Kernel Ceph - Denial of Service
Linux kernel Ceph contains a denial of service caused by unbounded delegated inode count handling in ceph_parse_deleg_inos(), letting a malicious or compromised MDS cause resource exhaustion, exploit requires attacker to control MDS.
- 7.5 /10 HighCVE-2026-89647 No auth
Linux Kernel - Denial of Service
Linux kernel contains a denial of service caused by a busy loop in ceph_trim_dentries() due to repeated re-queuing when no progress is possible, letting attackers cause high CPU usage, exploit requires no special privileges.
- 7.8 /10 HighCVE-2026-89646 Auth required
Linux Kernel Ceph - Broken Access Control
Linux kernel contains a broken access control vulnerability in Ceph where leaked inode references occur on writeback abort during umount, caused by failure to release wrbuffer claims, letting attackers cause inode eviction failure, exploit requires umount operation.
- 7.8 /10 HighCVE-2026-89641 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in cifs_file_set_size() caused by improper handling of tcon after cifsFileInfo_put(), letting attackers cause memory corruption or denial of service, exploit requires writable file handle.
- 7.1 /10 HighCVE-2026-89640 Auth required
Linux Kernel - Data Tampering & Denial of Service
Linux kernel contains a vulnerability in cifs_remap_file_range() caused by loff_t underflow when len is 0, letting attackers cause file range corruption, exploit requires crafted FSCTL_DUPLICATE_EXTENTS_TO_FILE request.
- 7.1 /10 HighCVE-2026-89639 Auth required
Linux Kernel - Cache Invalidation Issue in CIFS Truncate
Linux kernel contains a cache invalidation issue in cifs_do_truncate() caused by improper cache handling without i_rwsem, letting attackers cause stale cached data to be served, exploit requires file truncation with O_TRUNC flag.
- 7.8 /10 HighCVE-2026-89638 Auth required
Linux Kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability caused by improper clearing of setuid/setgid bits on write with cifsacl/modefromsid/posix extensions, letting attackers retain setuid/setgid bits unexpectedly, exploit requires usage of affected CIFS mount options.
- 8.2 /10 HighCVE-2026-89632 No auth
Linux Kernel smb client - Use-After-Check
Linux kernel contains a use-after-check vulnerability in smb client reparse_buf_ptr() caused by reading ReparseDataLength before validating buffer length, letting remote attackers cause memory corruption, exploit requires crafted server response.