Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10203
- Critical
- 1875
- CISA KEV
- 79
- Public PoC
- 367
Most common types
- Broken Access Control 1267
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 148 of 681
- 7.5 /10 HighCVE-2026-92876 No auth
IBM Maximo Application Suite - IoT Component - Denial of Service
IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 contains a denial of service caused by uncontrolled recursion, letting remote attackers cause service disruption, exploit requires no special conditions.
- 8.6 /10 HighCVE-2026-92682 Auth required
neo4j/graphql - Authorization Bypass
@neo4j/graphql >= 7.0.0 and < 7.6.4 contains an authorization bypass caused by incorrect translation of none quantifier in @authorization filters on relationships and connections, letting authenticated users read, create, or delete protected records, exploit requires authenticated user.
- 9.3 /10 CriticalCVE-2026-92681 No auth
neo4j/graphql - Authentication Bypass
@neo4j/graphql <= 7.6.3 contains an authentication bypass caused by ignoring @authentication directives at schema or type level on top-level @cypher fields, letting unauthenticated callers read and modify data, exploit requires exposed top-level @cypher fields.
- 9.6 /10 CriticalCVE-2026-9191
Progress MarkLogic Server - Broken Access Control
Progress MarkLogic Server 12.x < 12.1.0 and 11.x < 11.3.7 contain a broken access control vulnerability caused by insufficient isolation of user-supplied code in REST and XDBC evaluation paths, letting attackers perform unauthorized actions or compromise authenticated sessions, exploit requires code execution through affected paths.
- 7.5 /10 HighCVE-2026-90921 No auth
IBM Maximo AI Service - Denial of Service
IBM Maximo AI Service 9.1.0 and 9.2.0 contain a denial of service caused by improper handling of malformed frames, letting remote attackers terminate the host process, exploit requires network access.
- 9.8 /10 CriticalCVE-2026-90920 No auth
IBM Maximo AI Service - Remote Code Execution
IBM Maximo AI Service 9.1.0 and 9.2.0 contain a remote code execution caused by improper control of code generation, letting remote attackers execute arbitrary code, exploit requires network access.
- 7.5 /10 HighCVE-2026-90912 No auth
IBM Maximo AI Service - Denial of Service
IBM Maximo AI Service 9.1.0 and 9.2.0 SaaS contain a denial of service caused by uncontrolled recursion, letting remote attackers cause service disruption, exploit requires no special conditions.
- 7.5 /10 HighCVE-2026-90911 No auth
IBM Maximo AI Service - Denial of Service
IBM Maximo AI Service 9.1.0 and 9.2.0 contain a denial of service vulnerability caused by uncontrolled resource consumption, letting remote attackers cause service disruption, exploit requires network access.
- 9.1 /10 CriticalCVE-2026-87744 No auth
Quarkus REST Data Panache - Broken Access Control
Quarkus REST Data Panache contains a broken access control vulnerability caused by @MethodProperties customization dropping class-level security roles, letting unauthenticated attackers bypass security and access endpoints, exploit requires use of @MethodProperties without re-declaring roles.
- 8.8 /10 HighCVE-2026-87690 No auth
Metasploit Framework - Path Traversal & Remote Code Execution
Metasploit Framework post/apple_ios/gather/ios_image_gather contains a relative path traversal caused by unsanitized file names from a hostile iOS device in file download path, letting attacker-controlled devices achieve arbitrary file write and persistent code execution on the operator's workstation, exploit requires operator to run the gather module.
- 7.5 /10 HighCVE-2026-85975 No auth
Progress MarkLogic Server - Information Disclosure & Man-in-the-Middle
Progress MarkLogic Server 12.x < 12.1.0 and 11.x < 11.3.7 contain a cleartext transport vulnerability for Amazon S3 connections by default, letting network-positioned attackers intercept data or credentials, exploit requires network access.
- 7.4 /10 HighCVE-2026-85974
Progress MarkLogic Server - Weak Cryptography
Progress MarkLogic Server 12.x < 12.1.0 and 11.x < 11.3.7 contain a TLS certificate hostname validation weakness in outbound connections, letting network-positioned attackers intercept or modify communications, exploit requires network positioning.
- 7.4 /10 HighCVE-2026-85973 No auth
Progress MarkLogic Server - Man in the Middle
Progress MarkLogic Server 12.x < 12.1.0 contains a cleartext transport vulnerability in cluster-management communications, letting network-positioned attackers intercept or modify transmitted information, exploit requires network access.
- 7.4 /10 HighCVE-2026-85972
Progress MarkLogic Server - Authentication Bypass
Progress MarkLogic Server < 12.1.0 and < 11.3.7 contain a broken authentication caused by insufficient verification of Kerberos authentication service identity in certain password-based configurations, letting network-positioned attackers impersonate trusted infrastructure and gain unauthorized access or modify protected data, exploit requires specific password-based authentication configuration.
- 7.1 /10 HighCVE-2026-85971 Auth required
Progress MarkLogic Server - Broken Access Control
Progress MarkLogic Server 12.x < 12.1.0 and 11.x < 11.3.7 contain a broken access control vulnerability caused by overly permissive operating-system permissions on certain log files, letting local users read or alter log data, exploit requires local access.