Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 13360
- Critical
- 2486
- CISA KEV
- 125
- Public PoC
- 437
Most common types
- Broken Access Control 1691
- Remote Code Execution 1609
- Privilege Escalation 1307
- Authentication Bypass 1121
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 12 of 891
- 9.3 /10 CriticalCVE-2026-116606 No auth
Barracuda Email Security Gateway - Authentication Bypass
Barracuda Email Security Gateway < 9.4.0.030 contains an authentication bypass caused by improper access control in configuration-import function, letting unauthenticated remote attackers modify global configuration, exploit requires crafted backup archive.
- 7.0 /10 HighCVE-2026-115653 Auth required
Eclipse ThreadX - Memory Corruption
Eclipse ThreadX 6.0.1 through 6.5.2.202603 contains a memory corruption vulnerability caused by unchecked stack pointer usage in the PendSV handler of Cortex-M module ports, letting user-mode memory-protected modules read and write adjacent memory regions, exploit requires user-mode memory-protected module.
- 8.2 /10 HighCVE-2026-115403 No auth
Eclipse ThreadX NetX Duo - Denial of Service
Eclipse ThreadX NetX Duo 6.0 through 6.5.2.202603a contains a denial of service caused by unchecked destination-table entry addition in IPv6 raw send path, letting remote attackers crash the sending thread via crafted packets, exploit requires network access.
- 8.7 /10 HighCVE-2026-115215 No auth
Eclipse ThreadX NetX Duo - Denial of Service
Eclipse ThreadX NetX Duo 6.0 through 6.5.2.202603a contains a denial of service caused by fixed session pool exhaustion in NetX Secure DTLS server due to unreleased sessions from stalled handshakes, letting remote unauthenticated attackers deny service, exploit requires sending spoofed datagrams.
- 8.7 /10 HighCVE-2026-114408
Eclipse ThreadX NetX Duo - Denial of Service
Eclipse ThreadX NetX Duo 6.4.5.202504 through 6.5.2.202603a contains a denial of service caused by improper handling of ICMPv6 Packet Too Big messages in the destination table, letting network attackers crash the IP helper thread, exploit requires IPv6 path MTU discovery enabled.
- 8.6 /10 HighCVE-2026-111560 Auth required
Barracuda Appliance - Command Injection
Barracuda appliance products contain a command injection caused by improper neutralization of shell metacharacters in the timezone configuration field, letting authenticated administrators execute OS commands with root privileges, exploit requires administrator authentication.
- 8.4 /10 HighCVE-2026-111048 Auth required
FOSSBilling - Stored XSS
FOSSBilling 0.1.0 to 0.8.9 contains a stored XSS caused by unsanitized note parameter stored in support_ticket_note and rendered via innerHTML in admin ticket list, letting staff users with support.manage_tickets permission execute scripts with viewer's privileges, exploit requires staff user permission.
- 8.4 /10 HighCVE-2026-109142
Krill - Broken Access Control
Krill contains a broken access control vulnerability caused by in-process RFC 6492 provisioning exchange trusting unverified child identity, letting attackers impersonate child CAs, exploit requires parent and child CAs on the same server.
- 8.4 /10 HighCVE-2026-109141 Auth required
Generic System - Broken Access Control
A system contains a broken access control vulnerability caused by improper permission assignment to roles restricted to specific CAs, letting attackers create child CAs and ROAs with full permissions, exploit requires ability to send requests to bulk import endpoint.
- 8.4 /10 HighCVE-2026-109140
Krill - Weak Cryptography
Krill contains a weak cryptography vulnerability caused by reuse of (key, nonce) pairs for encrypting login-session tokens due to nonce counter reset on restart, letting attackers potentially decrypt or forge tokens, exploit requires attacker to observe encrypted tokens across restarts.
- 7.5 /10 HighCVE-2026-106808
OpenAirInterface Core Network - Buffer Overflow
OpenAirInterface Core Network v2.2.1 contains a stack-based buffer overflow caused by improper validation of resynchronizationInfo.rand and auts in Nudm_UEAU Generate Authentication Data endpoint, letting unauthenticated attackers with SBI interface access and valid SUPI terminate the UDM process.
- 7.5 /10 HighCVE-2026-106804 No auth
Kamailio - Buffer Overflow
Kamailio v6.1.3 and v6.1.4 contain a stack overflow caused by unchecked copying of the host field from SIP Via header in ims_qos_npn module, letting unauthenticated remote attackers cause denial of service via crafted REGISTER request.
- 9.3 /10 CriticalCVE-2026-105769 No auth
kaniko - Information Disclosure
kaniko < 1.25.20 contains an information disclosure caused by improper hostname validation in Azure Container Registry credential helper, letting attackers obtain Azure AD access tokens by referencing images on attacker-controlled lookalike hosts, exploit requires crafted Dockerfile referencing malicious registry.
- 9.5 /10 CriticalCVE-2026-105606 No auth
Joomla Extension joomlaboat.com - Unrestricted File Upload
Joomla Extension joomlaboat.com < 3.7.8 contains an unrestricted file upload vulnerability caused by unauthenticated upload of polyglot files to the web-accessible tmp directory, letting unauthenticated attackers write arbitrary files, exploit requires public Custom Tables submission form exposure.
- 9.3 /10 CriticalCVE-2026-105604 No auth
Joomla Extension DJ-Classifieds - SQL Injection
Joomla Extension DJ-Classifieds < 3.11.3 contains an unauthenticated SQL injection caused by improper input sanitization in the frontend search, letting unauthenticated attackers execute arbitrary SQL queries.