Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 135 of 677

  • 7.5 /10 High
    CVE-2026-103569 No auth

    Windows IKE Extension - Information Disclosure

    Windows IKE Extension contains an out-of-bounds read caused by improper memory handling, letting unauthorized attackers disclose information over a network, exploit requires no special privileges.

  • 7.8 /10 High
    CVE-2026-103568 Auth required

    Windows Credential Providers - Privilege Escalation

    Windows Credential Providers contain a race condition caused by concurrent execution using shared resources with improper synchronization, letting authorized attackers elevate privileges locally, exploit requires local access.

  • 7.0 /10 High
    CVE-2026-103565 Auth required

    Windows Broadcast DVR User Service - Privilege Escalation

    Windows Broadcast DVR User Service contains a use after free vulnerability allowing authorized local attackers to elevate privileges by exploiting memory corruption.

  • 7.5 /10 High
    CVE-2026-103558 No auth

    Microsoft Windows Routing and Remote Access Service - Denial of Service

    Microsoft Windows Routing and Remote Access Service contains a deadlock vulnerability causing denial of service, letting unauthorized attackers disrupt network services, exploit requires network access.

  • 7.0 /10 High
    CVE-2026-103555 Auth required

    Virtual Hard Disk Miniport Driver - Privilege Escalation

    Virtual Hard Disk (VHD) Miniport Driver contains a heap-based buffer overflow caused by improper memory handling, letting authorized local attackers elevate privileges, exploit requires local access with authorization.

  • 7.0 /10 High
    CVE-2026-103554 Auth required

    Windows Broadcast DVR User Service - Privilege Escalation

    Windows Broadcast DVR User Service contains a use after free vulnerability allowing authorized local attackers to elevate privileges by exploiting memory corruption.

  • 7.8 /10 High
    CVE-2026-103553 Auth required

    Windows Partition Management Driver - Privilege Escalation

    Windows Partition Management Driver contains an out-of-bounds read caused by improper memory handling, letting authorized attackers elevate privileges locally, exploit requires local access with authorization.

  • 7.5 /10 High
    CVE-2026-103499 No auth

    IBM WebSphere Application Server Liberty - Denial of Service

    IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10, and IBM WebSphere Application Server 8.5 and 9.0 Liberty contain a denial of service caused by uncontrolled resource consumption, letting remote unauthenticated attackers cause service disruption, exploit requires no special privileges.

  • 8.8 /10 High
    CVE-2026-103418 No auth

    Firefox for iOS - Stored XSS

    Firefox for iOS < 157.1 contains a stored XSS caused by direct interpolation of the page's HTML language attribute into translation JavaScript, letting attackers execute code in privileged content and bypass CSP, exploit requires attacker-controlled markup.

  • 7.1 /10 High
    CVE-2026-103316 Auth required

    DigiD - Code Injection

    DigiD macOS app contains a code injection vulnerability caused by lack of Hardened Runtime signing, letting local attackers execute arbitrary code and access sensitive data, exploit requires local user-level code execution.

  • 7.5 /10 High
    CVE-2026-103297 No auth

    CAI Content Credentials - Authentication Bypass

    CAI Content Credentials contains an improper verification of cryptographic signature vulnerability, letting attackers bypass security features and gain unauthorized write access, exploit requires no user interaction.

  • 7.5 /10 High
    CVE-2026-103296 No auth

    CAI Content Credentials - Authentication Bypass

    CAI Content Credentials contains an improper verification of cryptographic signature vulnerability, letting attackers bypass security features and gain unauthorized write access, exploit requires no user interaction.

  • 7.5 /10 High
    CVE-2026-103030 No auth

    Dio - Broken Access Control

    Dio 1.0.0 to 2.8.0 contains a broken access control caused by Http2Adapter._fetch copying original headers on cross-origin redirects without origin checks, letting attackers receive sensitive headers on redirected requests, exploit requires use of Http2Adapter with redirects enabled.

  • 9.3 /10 Critical
    CVE-2026-102989 No auth

    TanStack Router - Stored XSS

    TanStack Router versions @tanstack/start-server-core 1.143.12 to <1.169.39, @tanstack/react-start <1.168.60, @tanstack/solid-start <1.168.57, and @tanstack/vue-start <1.168.56 contain a stored XSS caused by attacker-controlled middleware state reaching error path, letting unauthenticated attackers inject scripts that execute with visitor's authority, exploit requires crafted server-function URL.

  • 8.5 /10 High
    CVE-2026-102982 Auth required

    Plane - Stored XSS

    Plane < 1.4.0 contains a stored XSS caused by failure to sanitize unsafe URL schemes in comment_html, letting project members execute attacker-controlled scripts in other users' browsers, exploit requires crafted comment link.