Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10203
- Critical
- 1875
- CISA KEV
- 79
- Public PoC
- 367
Most common types
- Broken Access Control 1267
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 145 of 681
- 7.5 /10 HighCVE-2026-100139 No auth
CAI Content Credentials - Denial of Service
CAI Content Credentials contains an uncontrolled resource consumption vulnerability caused by improper resource management, letting attackers cause application denial-of-service, exploit requires no user interaction.
- 7.5 /10 HighCVE-2026-100138 No auth
CAI Content Credentials - Denial of Service
CAI Content Credentials contains an uncontrolled resource consumption vulnerability caused by improper resource management, letting attackers cause application denial-of-service, exploit requires no user interaction.
- 7.5 /10 HighCVE-2026-100137 No auth
CAI Content Credentials - Denial of Service
CAI Content Credentials contains an uncontrolled resource consumption vulnerability caused by improper resource management, letting attackers cause application denial-of-service, exploit requires no user interaction.
- 7.5 /10 HighCVE-2026-100136 No auth
CAI Content Credentials - Denial of Service
CAI Content Credentials contains an integer overflow or wraparound vulnerability that can cause application denial-of-service, letting attackers crash the application remotely, exploit requires no user interaction.
- 7.5 /10 HighCVE-2026-100135 No auth
CAI Content Credentials - Security Feature Bypass
CAI Content Credentials contains an improper input validation vulnerability that allows attackers to bypass security features and gain unauthorized write access, exploit requires no user interaction.
- 9.3 /10 CriticalCVE-2026-100133 No auth
Adobe Commerce - Stored XSS
Adobe Commerce contains a stored XSS vulnerability caused by improper sanitization of form fields, letting attackers inject malicious scripts that execute in victim browsers, potentially gaining elevated access, exploit requires victim to visit the vulnerable page.
- 7.8 /10 HighCVE-2026-100129 No auth
Bridge - Remote Code Execution
Bridge contains an out-of-bounds write vulnerability caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.
- 7.8 /10 HighCVE-2026-100128 No auth
Bridge - Remote Code Execution
Bridge contains an out-of-bounds write vulnerability caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.
- 7.8 /10 HighCVE-2026-100127 No auth
Bridge - Remote Code Execution
Bridge contains an out-of-bounds write vulnerability caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.
- 7.5 /10 HighCVE-2026-100124 No auth
CAI Content Credentials - Broken Access Control
CAI Content Credentials contains an improper input validation vulnerability that allows attackers to bypass security features and gain unauthorized write access, exploit requires no user interaction.
- 7.5 /10 HighCVE-2026-100123 No auth
CAI Content Credentials - Authentication Bypass
CAI Content Credentials contains an improper certificate validation vulnerability that allows attackers to bypass security features and gain unauthorized write access, exploit requires no user interaction.
- 7.5 /10 HighCVE-2026-100122 No auth
CAI Content Credentials - Authentication Bypass
CAI Content Credentials contains an improper certificate validation vulnerability that allows attackers to bypass security features and gain unauthorized write access, exploit requires no user interaction.
- 7.5 /10 HighCVE-2026-100121 No auth
CAI Content Credentials - Authentication Bypass
CAI Content Credentials contains an improper certificate validation vulnerability that allows attackers to bypass security features and gain unauthorized write access, exploit requires no user interaction.
- 7.5 /10 HighCVE-2026-100120 No auth
CAI Content Credentials - Broken Access Control
CAI Content Credentials contains an improper input validation vulnerability that allows attackers to bypass security features and gain unauthorized write access, exploit requires no user interaction.
- 7.5 /10 HighCVE-2026-100119 No auth
CAI Content Credentials - Broken Access Control
CAI Content Credentials contains an improper input validation vulnerability that allows attackers to bypass security features and gain unauthorized write access, exploit requires no user interaction.