High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 13360
- Critical
- 2486
- CISA KEV
- 125
- Public PoC
- 437
Most common types
- Broken Access Control 1691
- Remote Code Execution 1609
- Privilege Escalation 1307
- Authentication Bypass 1121
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 659 of 725
- 8.4 /10 HighCVE-2026-80953 No auth
Linux kernel i3c master adi - Race Condition
Linux kernel i3c master adi contains a race condition caused by initializing the lock after enabling interrupts in adi_i3c_master_probe(), letting interrupts access uninitialized lock, exploit requires interrupt triggering after IRQ unmasking.
- 7.8 /10 HighCVE-2026-80952
Linux Kernel i3c Master - Use After Free & Information Disclosure
Linux kernel i3c master contains an information leak and use-after-free caused by clearing device descriptor before device_unregister(), letting attackers leak kernel stack contents and cause use-after-free during device unregistration, exploit requires race condition during device unbind.
- 7.8 /10 HighCVE-2026-80950
Linux Kernel Renesas I3C - Use After Free
Linux kernel Renesas I3C driver contains a use-after-free vulnerability caused by accessing freed memory in the interrupt handler, letting attackers cause system crashes, exploit requires triggering interrupt after timeout.
- 7.8 /10 HighCVE-2026-80947 Auth required
Linux kernel rtl8xxxu - Use After Free
Linux kernel rtl8xxxu driver contains a use-after-free vulnerability caused by improper cancellation of rx_urb_wq worker during device stop, letting attackers cause memory corruption or system instability, exploit requires active RX traffic followed by device disconnect.
- 7.8 /10 HighCVE-2026-80944 Auth required
Linux Kernel mwifiex - Denial of Service
Linux kernel mwifiex driver contains a stack corruption vulnerability caused by late firmware responses writing through stale stack-backed data buffers after interrupted wait_event_interruptible_timeout calls, letting attackers cause kernel panic and memory corruption, exploit requires repeated association/disassociation cycles.
- 7.6 /10 HighCVE-2026-80943 No auth
Linux Kernel rtlwifi - Out-of-Bounds Read/Write
Linux kernel wifi rtlwifi rtl8192du contains an out-of-bounds array indexing vulnerability caused by unchecked QoS TID indexing in rtl92du_tx_fill_desc(), letting attackers potentially cause memory corruption or denial of service, exploit requires crafted network packets.
- 8.8 /10 HighCVE-2026-80937
Linux Kernel - Out-of-Bounds Write
Linux kernel contains a buffer overflow caused by unchecked device-controlled EEPROM address in mt7915_mcu_get_eeprom(), letting malicious devices perform out-of-bounds writes, exploit requires malicious or malfunctioning device.
- 7.8 /10 HighCVE-2026-80936
Linux kernel mt76 mt7925 - Use After Free
Linux kernel mt76 mt7925 contains a use-after-free caused by not cancelling delayed mlo_pm_work during device stop, letting attackers cause kernel warnings or crashes, exploit requires device teardown during power-save setup.
- 8.8 /10 HighCVE-2026-80935
Linux Kernel mt76 - Out-of-Bounds Write
Linux kernel mt76 mt7996 contains an out-of-bounds write vulnerability caused by unbounded device EEPROM address in mt7996_mcu_get_eeprom(), letting malicious devices write beyond eeprom.data, exploit requires malicious or malfunctioning device.
- 7.8 /10 HighCVE-2026-80933
Linux kernel mt76 - Out of Bounds Read
Linux kernel mt76 mt7996 driver contains a buffer overflow caused by lack of length validation of default EEPROM firmware, letting attackers cause out-of-bounds read, exploit requires supplying truncated firmware file.
- 8.4 /10 HighCVE-2026-80932 No auth
Linux Kernel virtio_vsock - Use After Free
Linux kernel virtio_vsock contains a use-after-free vulnerability caused by improper flushing order of dependent work items in virtio_vsock_remove(), letting attackers cause memory corruption or system instability, exploit requires kernel-level access.
- 7.8 /10 HighCVE-2026-80931
Linux Kernel w1: ds28e17 - Out of Bounds Read
Linux kernel w1: ds28e17 contains a buffer overflow caused by improper length validation in I2C block read, letting a malicious device cause out-of-bounds read, exploit requires a malicious I2C slave device.
- 7.8 /10 HighCVE-2026-80929 Auth required
Linux Kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability caused by improper placement of the "cad_pid" sysctl entry in pid_table[], allowing non-root users to modify it via unshared pid/user namespaces, exploit requires namespace unsharing.
- 7.8 /10 HighCVE-2026-80928 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in smack_file_send_sigiotask() caused by improper access to task credentials, letting attackers cause memory corruption, exploit requires triggering specific task credential inspection.
- 8.3 /10 HighCVE-2026-80469 No auth
Device Driver Package - Remote Code Execution
A device driver package upload mechanism contains a code execution vulnerability caused by bypassing driver verification, letting attackers execute arbitrary code, exploit requires user interaction.