High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 13360
- Critical
- 2486
- CISA KEV
- 125
- Public PoC
- 437
Most common types
- Broken Access Control 1691
- Remote Code Execution 1609
- Privilege Escalation 1307
- Authentication Bypass 1121
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 658 of 725
- 7.5 /10 HighCVE-2026-80987 No auth
Linux Kernel - Denial of Service
Linux kernel contains a denial of service caused by improper handling of oversized TX buffers in ntb_transport, letting attackers cause resource leaks, exploit requires sending oversized buffers.
- 8.2 /10 HighCVE-2026-80985
Linux Kernel - Data Tampering & Denial of Service
Linux kernel contains a vulnerability in net/smc where oversized SMC-Rv2 LLC messages are improperly handled in smc_llc_rmt_delete_rkey() and smc_llc_save_add_link_rkeys(), letting attackers cause unintended rkey deletions and modifications, exploit requires crafted SMC-Rv2 LLC messages on a shared v2 receive buffer link.
- 7.8 /10 HighCVE-2026-80982 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in net/smc due to improper locking in smc_rx_pipe_buf_release(), letting attackers cause memory corruption or denial of service, exploit requires concurrent socket close and receive operations.
- 7.8 /10 HighCVE-2026-80979 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in net/smc due to improper connection unregistering and tasklet draining, letting attackers cause kernel memory corruption, exploit requires triggering specific network operations.
- 7.8 /10 HighCVE-2026-80978 Auth required
Linux Kernel - Buffer Overflow
Linux kernel contains a buffer overflow caused by uncapped advertised IP tunnel headroom derived from lower output devices, letting attackers cause skb header offset wrap, exploit requires crafted tunnel configuration.
- 7.8 /10 HighCVE-2026-80977
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in net subsystem caused by improper handling of shared zerocopy state in skb_tx_error(), letting attackers cause memory corruption or data tampering via cloned skb packets, exploit requires packet cloning in Open vSwitch.
- 7.8 /10 HighCVE-2026-80975 Auth required
Linux Kernel - Memory Corruption
Linux kernel contains a stack buffer overflow caused by use of an on-stack reply buffer in qnap_mcu_exec() that can be overwritten by late or unsolicited MCU messages, letting attackers cause memory corruption, exploit requires triggering command timeout.
- 7.8 /10 HighCVE-2026-80971 Auth required
Linux Kernel ALSA bcd2000 - Use After Free
Linux kernel ALSA bcd2000 contains a use-after-free vulnerability caused by freed URB pointers not being cleared on device disconnect, letting local attackers cause memory corruption or kernel crash, exploit requires device unplug during substream use.
- 8.4 /10 HighCVE-2026-80967 No auth
Linux Kernel ALSA pcxhr - Race Condition
Linux kernel ALSA pcxhr contains a race condition caused by initializing mutexes after requesting threaded IRQ, letting interrupts run against uninitialized mutexes, exploit requires race condition during device probe.
- 7.8 /10 HighCVE-2026-80962 Auth required
Linux Kernel dm-pcache - Out-of-Bounds Read & Write
Linux kernel dm-pcache contains an out-of-bounds read and write caused by unvalidated geometry fields from on-disk cache_info, letting attackers with CAP_SYS_ADMIN privileges cause memory corruption, exploit requires CAP_SYS_ADMIN.
- 7.8 /10 HighCVE-2026-80961 Auth required
Linux Kernel dm-pcache - Information Disclosure
Linux kernel dm-pcache contains an out-of-bounds read caused by improper validation of kset key_num and intra-segment bounds in cache_key_decode(), letting attackers with CAP_SYS_ADMIN leak adjacent persistent memory to user space, exploit requires CAP_SYS_ADMIN privilege.
- 7.8 /10 HighCVE-2026-80959 Auth required
Linux Kernel dm-pcache - Out of Bounds Read
Linux kernel dm-pcache contains a buffer overflow caused by unchecked segment offset in cache_pos_decode(), letting attackers with CAP_SYS_ADMIN privileges read past segment data, exploit requires CAP_SYS_ADMIN privileges.
- 7.1 /10 HighCVE-2026-80958
Linux kernel dm-pcache - Out of Bounds Read
Linux kernel dm-pcache contains a buffer over-read caused by improper bounds checking in tail kset read in cache_replay(), letting attackers potentially read beyond segment data, exploit requires local access.
- 7.8 /10 HighCVE-2026-80955 Auth required
Linux Kernel dm-pcache - Use After Free
Linux kernel dm-pcache contains a use-after-free vulnerability caused by accessing freed key memory in kset_replay(), letting attackers cause memory corruption or denial of service, exploit requires triggering stale key conditions.
- 7.8 /10 HighCVE-2026-80954 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode(), letting attackers cause memory corruption or system instability, exploit requires kernel-level access.