Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10203
- Critical
- 1875
- CISA KEV
- 79
- Public PoC
- 367
Most common types
- Broken Access Control 1267
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 147 of 681
- 9.8 /10 CriticalCVE-2024-34320
ProPhoenix Law RMS - Broken Access Control
ProPhoenix Law RMS v2022.2403.3.101 contains an incorrect access control issue in sensitive API endpoints, letting attackers bypass authorization, exploit requires access to the API endpoints.
- 7.5 /10 HighCVE-2026-96612 No auth
hexpm hex - Path Traversal
hexpm hex from 0.6.0 before 2.5.2 contains a path traversal caused by improper validation of app label in package requirements, letting malicious package publishers delete and write files outside the deps directory, exploit requires a malicious package release.
- 8.2 /10 HighCVE-2026-96266 Auth required
IBM Power Systems Firmware - Memory Corruption
IBM Power Systems Firmware FW1060.00 through FW1060.81 contains a memory corruption vulnerability caused by improper host firmware configuration parsing, letting authenticated service-level attackers compromise the host firmware boot stack and hypervisor during system IPL.
- 8.2 /10 HighCVE-2026-96265 Auth required
IBM Power Systems Firmware - Broken Access Control
IBM Power Systems Firmware FW1060.00 through FW1060.81 contains a broken access control vulnerability caused by improper validation in the service processor mailbox interface, letting authenticated service-level attackers read or modify Hostboot memory, exploit requires authenticated service-level access.
- 8.2 /10 HighCVE-2026-96264 Auth required
IBM Power Systems Firmware - Remote Code Execution
IBM Power Systems Firmware FW1060.00 through FW1060.81 contains a buffer overflow vulnerability in the service processor mailbox interface, letting authenticated service-level attackers execute arbitrary code in host firmware runtime, exploit requires authenticated service-level access.
- 8.2 /10 HighCVE-2026-96263
IBM Power Systems Firmware - Remote Code Execution
IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 contain a remote code execution vulnerability caused by improper validation in the host firmware boot process image path, letting attackers with service processor access execute arbitrary code on the host system.
- 8.2 /10 HighCVE-2026-96262 Auth required
IBM Power Systems Firmware - Remote Code Execution
IBM Power Systems Firmware FW1060.00 through FW1060.81 contains a buffer overflow vulnerability in the service processor mailbox interface, letting authenticated service-level attackers execute arbitrary code in host firmware runtime.
- 7.3 /10 HighCVE-2026-96261 Auth required
IBM Power Systems Firmware - Denial of Service
IBM Power Systems Firmware FW1060.00 through FW1060.81 contains a denial of service caused by improper host firmware configuration parsing, letting authenticated service-level attackers crash the host firmware boot stack, exploit requires authenticated service-level access.
- 9.9 /10 CriticalCVE-2026-96012 Auth required
IBM Db2 Mirror for i - Privilege Escalation
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 contains a privilege escalation vulnerability caused by bypassing authorization and input validation checks via crafted requests, letting authenticated attackers execute malicious code and elevate privileges.
- 7.8 /10 HighCVE-2026-95837 Auth required
containerd - Privilege Escalation
containerd 2.1.0 to 2.2.7 and 2.3.4 contain a privilege escalation caused by CRIU restoring process security state from checkpoint data instead of enforcing ContainerConfig, letting attackers create containers with elevated privileges, exploit requires ability to create containers from crafted checkpoints.
- 8.1 /10 HighCVE-2026-93892 Auth required
IBM TRIRIGA Application Platform - Information Disclosure
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 contains an information disclosure vulnerability caused by exposure of session tokens in HTML responses, letting remote authenticated attackers obtain sensitive information.
- 7.6 /10 HighCVE-2026-93891 Auth required
IBM TRIRIGA Application Platform - XML External Entity Injection
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 contains an XML external entity injection caused by improper XML input handling, letting remote authenticated attackers obtain sensitive information, exploit requires authentication.
- 7.4 /10 HighCVE-2026-93695
In Progress ShareFile Storage Zones Controller - Remote Code Execution
In Progress ShareFile Storage Zones Controller v5.12.6 and below contains a file system write vulnerability caused by FileCopyService using a remote file identifier without containment enforcement, letting attackers write arbitrary files remotely, exploit requires writable executable IIS-served directory.
- 9.4 /10 CriticalCVE-2026-93582
OTRS Community Edition - Authentication Bypass
OTRS Community Edition <= 6 contains an authentication bypass caused by trusting HTTP_REMOTE_USER environment variable from attacker-controlled HTTP headers, letting unauthenticated remote attackers impersonate users, exploit requires HTTP Basic Authentication backend and vulnerable web server environment.
- 8.3 /10 HighCVE-2026-92877 No auth
JAXB - XML External Entity Injection
JAXB contains an XML External Entity (XXE) injection caused by insufficient protection relying only on FEATURE_SECURE_PROCESSING, letting attackers read local files via out-of-band XXE, exploit requires untrusted XML unmarshalling.