Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 11 of 677

  • 7.1 /10 High
    CVE-2026-79828 Auth required

    HPE NonStop Debug Utilities - Buffer Overflow

    HPE NonStop Debug Utilities contains a heap buffer overflow caused by improper memory handling, letting attackers potentially corrupt resume-execution address and redirect execution flow, exploit requires no special conditions.

  • 7.1 /10 High
    CVE-2026-79827 Auth required

    HPE NonStop Inspect Subsystem - Buffer Overflow

    HPE NonStop Inspect Subsystem contains a heap buffer overflow caused by improper memory handling, letting attackers potentially corrupt resume-execution address and redirect execution flow, exploit requires crafted input.

  • 7.1 /10 High
    CVE-2026-79826 Auth required

    HPE NonStop OCAX - Buffer Overflow

    HPE NonStop OCAX contains a heap buffer overflow caused by improper memory handling, letting attackers potentially corrupt address space and redirect execution flow, exploit requires no special conditions.

  • 7.1 /10 High
    CVE-2026-79825 Auth required

    HPE NonStop NDSREST - Buffer Overflow

    HPE NonStop NDSREST contains a heap buffer overflow caused by improper memory handling, letting attackers potentially redirect execution flow by corrupting resume-execution address, exploit requires crafted input.

  • 8.0 /10 High
    CVE-2026-79824 No auth

    HPE NonStop Python - Path Traversal

    HPE NonStop Python 3.x contains a path traversal vulnerability caused by improper handling of .. sequences in TAR archive filenames, letting attackers overwrite arbitrary files, exploit requires crafted TAR archive.

  • 7.1 /10 High
    CVE-2026-79822 Auth required

    HPE NonStop TNS/X Native Inspect - Memory Corruption

    HPE NonStop TNS/X Native Inspect contains a memory corruption vulnerability caused by address corruption, potentially redirecting execution flow, letting attackers execute arbitrary code, exploit requires unspecified conditions.

  • 8.2 /10 High
    CVE-2026-79821 No auth

    HPE NonStop SOAP - Denial of Service

    HPE NonStop SOAP 4.0 contains a memory corruption vulnerability that may cause system downtime, letting attackers cause denial of service, exploit requires no special privileges.

  • 8.8 /10 High
    CVE-2026-77931 No auth

    MoviePilot - Command Injection

    MoviePilot through 3.1.5 contains a command injection caused by untrusted content processed by tools that pass commands to ExecuteCommandTool via asyncio.create_subprocess_shell, letting attackers execute arbitrary OS commands remotely, exploit requires admin session with is_admin context.

  • 8.2 /10 High
    CVE-2026-77711 No auth

    Jetty HttpClient - Authentication Bypass

    Jetty HttpClient contains a proxy authentication misinterpretation caused by treating server 407 responses as proxy responses, letting attackers gain proxy credentials disclosure, exploit requires use of forward proxy.

  • 7.1 /10 High
    CVE-2026-76665 No auth

    HPE NonStop EXPAND - Buffer Overflow

    HPE NonStop EXPAND contains a buffer overflow caused by out-of-bounds memory read, letting attackers potentially cause memory corruption or denial of service, exploit requires no special conditions.

  • 7.5 /10 High
    CVE-2026-76663 No auth

    HPE NonStop TELSERV - Buffer Overflow

    HPE NonStop TELSERV contains a stack-based buffer overflow caused by improper memory handling, letting attackers cause denial of service via memory corruption, exploit requires no special conditions.

  • 7.6 /10 High
    CVE-2026-76661 Auth required

    HPE NonStop QIOMON - Out of Bounds Write

    HPE NonStop QIOMON contains an out-of-bounds write vulnerability caused by improper buffer handling, letting attackers corrupt buffer data, exploit requires no special conditions.

  • 8.7 /10 High
    CVE-2026-76660 Auth required

    HPE NonStop CIPSAM - Buffer Overflow

    HPE NonStop CIPSAM contains a buffer overflow caused by an out-of-bounds write, letting attackers corrupt buffer data, exploit requires network access.

  • 7.5 /10 High
    CVE-2026-76659 No auth

    HPE NonStop TCP/IP UTILITIES - Denial of Service

    HPE NonStop TCP/IP UTILITIES contains a denial of service vulnerability in the finger daemon, letting unauthenticated remote attackers cause service disruption, exploit requires network access.

  • 8.2 /10 High
    CVE-2026-76184 No auth

    Eclipse Jetty HttpClient - Open Redirect

    Eclipse Jetty HttpClient contains an open redirect caused by improper path normalization in redirects, letting attackers on the same domain receive Authorization headers intended for other paths, exploit requires attacker-controlled redirects on the same domain.