Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 132 of 677

  • 8.6 /10 Critical
    CVE-2026-104935 CISA KEVPoC publicNo auth

    ICS - Authentication Bypass

    ICS < 25.1.3.0 contains an authentication bypass by spoofing, letting remote unauthenticated attackers execute arbitrary commands, exploit requires no special privileges.

  • 7.1 /10 High
    CVE-2026-104875 Auth required

    Ente - Authorization Bypass

    Ente server image < 2026.07.09 contains an authorization bypass caused by insufficient validation of client-supplied userID and recovery-session UUID in /emergency-contacts/approve-recovery endpoint, letting accepted emergency contacts approve recovery and access recovery information prematurely, exploit requires victim to have previously accepted attacker as emergency contact.

  • 8.7 /10 High
    CVE-2026-104817 No auth

    Misskey - Denial of Service

    Misskey 12.112.1 to 2026.7.0 contains a denial of service caused by lack of rate limiting and response-size restrictions in unauthenticated fetch-rss API with synchronous XML parsing, letting attackers exhaust resources and amplify requests, exploit requires no authentication.

  • 8.5 /10 High
    CVE-2026-104816

    Misskey - Stored XSS

    Misskey 12.0.0 < 2026.7.0 contains a stored XSS caused by missing URL scheme verification in RSS feed item links, letting attackers controlling feed content execute scripts when users click links in RSS widgets, exploit requires attacker to control feed content.

  • 9.8 /10 Critical
    CVE-2026-104585 PoC publicNo auth

    Mobile Security Framework (MobSF) - Command Injection

    Mobile Security Framework (MobSF) v4.5.2 contains a command injection caused by improper input handling in /download_data/, /api/v1/scan, and Dynamic Analyzer ADB integration module, letting attackers execute arbitrary commands remotely, exploit requires network access.

  • 7.8 /10 High
    CVE-2026-104348 No auth

    Adobe Photoshop Desktop - Remote Code Execution

    Adobe Photoshop Desktop contains a heap-based buffer overflow caused by processing crafted files, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.

  • 7.8 /10 High
    CVE-2026-104347 No auth

    Adobe Photoshop Desktop - Remote Code Execution

    Adobe Photoshop Desktop contains an out-of-bounds write vulnerability caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.

  • 7.8 /10 High
    CVE-2026-104346 No auth

    Adobe Photoshop Desktop - Remote Code Execution

    Adobe Photoshop Desktop contains an out-of-bounds write vulnerability caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.

  • 7.5 /10 High
    CVE-2026-104345 No auth

    CAI Content Credentials - Security Feature Bypass

    CAI Content Credentials contains an improper input validation vulnerability that allows attackers to bypass security features and gain unauthorized write access, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-104344 No auth

    Adobe Framemaker - Remote Code Execution

    Adobe Framemaker contains a heap-based buffer overflow caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.

  • 7.8 /10 High
    CVE-2026-104342 No auth

    Adobe Framemaker - Use After Free

    Adobe Framemaker contains a use after free vulnerability that could result in arbitrary code execution in the context of the current user, letting attackers execute code, exploit requires victim to open a malicious file.

  • 7.8 /10 High
    CVE-2026-104341 No auth

    Adobe Framemaker - Remote Code Execution

    Adobe Framemaker contains an out-of-bounds write vulnerability caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.

  • 7.8 /10 High
    CVE-2026-104340 No auth

    Adobe Framemaker - Remote Code Execution

    Adobe Framemaker contains a heap-based buffer overflow caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.

  • 9.8 /10 Critical
    CVE-2026-104252 No auth

    Vitess - Stored XSS

    Vitess < 23.0.5 and < 24.0.2 contains a stored XSS caused by unescaped Action and dtid form values in the /twopcz HTTP debug endpoint, letting remote unauthenticated attackers execute scripts in operator browsers, exploit requires operator to open crafted request.

  • 9.6 /10 Critical
    CVE-2026-104192 No auth

    Dragonfly - Use After Free

    Dragonfly < 1.40 contains a double-free vulnerability caused by improper cleanup of shared objects in OpaqueObjLoader::CreateStream, letting unauthenticated clients cause denial of service or remote code execution via crafted RESTORE streams.