High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 82 of 552
- 8.5 /10 HighCVE-2026-75826 Auth required
Teltonika Networks RUTOS & TSWOS - Command Injection
Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2, and TSWOS 1.9 before 1.10.4 contain a command injection caused by improper input sanitization in the backup function, letting remote authenticated attackers execute arbitrary OS commands.
- 7.6 /10 HighCVE-2026-75748 Auth required
ColdFusion - Server-Side Request Forgery
ColdFusion contains a server-side request forgery caused by improper validation of URLs, letting attackers with high privileges escalate their access to internal resources, exploit requires high privileges.
- 7.1 /10 HighCVE-2026-74045 Auth required
Wazuh - Buffer Overflow
Wazuh 3.12.0 before 4.14.8 contains a heap buffer overflow caused by improper sizing in fim_generate_alert(), letting enrolled agents crash wazuh-analysisd causing detection outages, exploit requires an enrolled agent.
- 7.2 /10 HighCVE-2026-74037 Auth required
Wazuh - Authentication Bypass
Wazuh 4.0.0 < 4.14.8 contains a broken authentication caused by failure to invalidate tokens for run_as users with zero static roles, letting attackers with revoked admin grants retain privileged access, exploit requires revoked admin privileges.
- 7.2 /10 HighCVE-2026-74036
Wazuh - Remote Code Execution
Wazuh 4.3.0 < 4.14.8 contains a remote code execution caused by SCA policy trust determined by file path instead of configuration source, letting attackers controlling a manager execute commands as root on agents, exploit requires manager control.
- 7.2 /10 HighCVE-2026-74035 Auth required
Wazuh - Authentication Bypass
Wazuh >= 4.6.0 < 4.14.8 contains an authentication bypass caused by a falsy truthiness check in security.update_user, letting delegated user administrators bypass reserved user guard and authenticate with empty credentials.
- 7.5 /10 HighCVE-2026-74034 PoC publicNo auth
Wazuh - Broken Access Control
Wazuh 4.1.0 before 4.14.8 contains a missing origin check in wm_agent_upgrade, letting enrolled agents read arbitrary files as root via upgrade_custom commands with attacker-controlled file_path, exploit requires enrolled agent access.
- 7.8 /10 HighCVE-2026-73027 Auth required
Windows Setup Files Cleanup - Privilege Escalation
Windows Setup Files Cleanup contains a privilege escalation caused by external control of system or configuration settings, letting authorized attackers elevate privileges locally, exploit requires local access with authorization.
- 7.0 /10 HighCVE-2026-72969 Auth required
Windows Program Compatibility Assistant Service - Privilege Escalation
Windows Program Compatibility Assistant Service contains a use after free vulnerability, letting authorized local attackers elevate privileges, exploit requires local access with authorization.
- 7.0 /10 HighCVE-2026-72968 Auth required
Windows Program Compatibility Assistant Service - Privilege Escalation
Windows Program Compatibility Assistant Service contains a use after free vulnerability, letting authorized local attackers elevate privileges, exploit requires local access with authorization.
- 7.0 /10 HighCVE-2026-72955 Auth required
Windows Application Compatibility Cache - Privilege Escalation
Windows Application Compatibility Cache contains a use after free vulnerability allowing authorized local attackers to elevate privileges by exploiting memory corruption.
- 7.0 /10 HighCVE-2026-72934 Auth required
Windows Program Compatibility Assistant Service - Privilege Escalation
Windows Program Compatibility Assistant Service contains a use after free vulnerability, letting authorized local attackers elevate privileges, exploit requires local access with authorization.
- 7.7 /10 HighCVE-2026-72895 No auth
SIMATIC IPC - Authentication Bypass
SIMATIC IPC BX-21A < V31.01.13, IPC RW-543A < V1.1.4, IPC227G/IPC277G/IPC277G PRO/IPC327G/IPC377G < V28.01.15 contain a UEFI Secure Boot bypass caused by presence of BIOS vendor test key in the Secure Boot key database, letting local attackers with physical or administrative access bypass Secure Boot protections, exploit requires local physical or administrative access.
- 8.4 /10 HighCVE-2026-71385 Auth required
ColdFusion - Broken Access Control
ColdFusion contains an incorrect authorization vulnerability caused by improper access control, letting attackers with high privileges execute arbitrary code in the context of the current user, exploit requires administrative network zone access.
- 8.8 /10 HighCVE-2026-70580 Auth required
Windows Credential Guard - Authentication Bypass
Windows Credential Guard contains a missing authentication for critical function vulnerability, letting authorized local attackers perform spoofing, exploit requires local access.