Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 153 of 681

  • 7.2 /10 High
    CVE-2026-41510 No auth

    OWASP Coraza WAF - Broken Access Control & Denial of Service

    OWASP Coraza WAF 3.0.0 to 3.8.1 contains a broken access control vulnerability caused by silent omission of arguments exceeding SecArgumentsLimit in request processing, letting unauthenticated attackers bypass WAF rules and cause memory exhaustion.

  • 7.3 /10 High
    CVE-2026-21139

    Samsung Continuity Service - Broken Access Control

    Samsung Continuity Service for Windows < 4.6.1217.0 contains an improper access control vulnerability caused by insufficient restrictions, letting adjacent attackers manipulate connected mobile devices, exploit requires network adjacency.

  • 8.6 /10 High
    CVE-2026-21125 No auth

    Samsung libsimba.heifdec.media.samsung.so - Command Injection

    Samsung libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 contains a command injection caused by improper input validation in parsing sheifd, letting local attackers execute arbitrary code.

  • 8.6 /10 High
    CVE-2026-21124

    libsimba.heifdec.media.samsung.so - Remote Code Execution

    libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 contains a remote code execution vulnerability caused by improper input validation in getting cover image, letting local attackers execute arbitrary code, exploit requires local access.

  • 7.0 /10 High
    CVE-2026-21122 No auth

    Samsung libsamsungtts.so - Buffer Overflow

    Samsung libsamsungtts.so < SMR Oct-2026 Release 1 contains a buffer overflow caused by out-of-bounds write, letting local attackers execute arbitrary code, exploit requires local access.

  • 8.9 /10 High
    CVE-2026-21120 No auth

    WSM service - Use After Free

    WSM service prior to SMR Oct-2026 Release 1 contains a use after free vulnerability in WSM service, letting local attackers execute arbitrary code with system privileges, exploit requires local access.

  • 7.0 /10 High
    CVE-2026-21114 No auth

    libsmkvextractor.so - Buffer Overflow

    libsmkvextractor.so prior to SMR Oct-2026 Release 1 contains a buffer overflow caused by out-of-bounds write, letting local attackers execute arbitrary code, exploit requires local access.

  • 8.2 /10 High
    CVE-2026-19627 No auth

    IBM Planning Analytics - Path Traversal

    IBM Planning Analytics 2.0 and 2.1 contain a path traversal caused by improper validation of file paths, letting remote attackers read arbitrary host files and overwrite application files, exploit requires no special privileges.

  • 8.8 /10 High
    CVE-2026-19622 Auth required

    IBM Planning Analytics - Authentication Bypass & Privilege Escalation

    IBM Planning Analytics 2.0 and 2.1 contain an authentication bypass caused by improper validation of sub-requests, letting remote attackers bypass authentication and escalate privileges, exploit requires crafted sub-requests.

  • 8.8 /10 High
    CVE-2026-19620 Auth required

    IBM Planning Analytics - Authentication Bypass

    IBM Planning Analytics 2.0 and 2.1 contain a broken authentication caused by improper authentication, letting remote attackers gain unauthorized administrative access, exploit requires no special conditions.

  • 7.5 /10 High
    CVE-2026-1907 Auth required

    Kong Gateway - SQL Injection

    Kong Gateway (Enterprise and Open Source) contains a sql injection caused by specially crafted RPC requests in clustering communication logic in Hybrid Mode, letting attackers access unauthorized database data, exploit requires network access and valid client certificate and key.

  • 8.7 /10 High
    CVE-2026-18537 Auth required

    IBM Maximo Application Suite - Improper Input Validation

    IBM Maximo Application Suite Location Service for Esri Component 9.2, 9.1, and 9.0 contains an improper input validation vulnerability caused by an unsanitised container image reference in a Kubernetes operator template, letting attackers potentially manipulate input, exploit requires crafted input.

  • 8.7 /10 High
    CVE-2026-18529 Auth required

    IBM Maximo Application Suite - Location Service for Esri Component - Command Injection

    IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 contains a command injection caused by improper sanitisation of user-controlled input in a Kubernetes operator task, letting attackers execute arbitrary commands remotely, exploit requires network access.

  • 7.7 /10 High
    CVE-2026-18517 Auth required

    IBM Maximo Application Suite - Location Service for Esri Component - Misconfiguration

    IBM Maximo Application Suite - Location Service for Esri Component 9.0, 9.1, and 9.2 contains a misconfiguration in Kubernetes NetworkPolicy causing unintended network egress, letting attackers potentially access unauthorized network resources, exploit requires network access.

  • 7.2 /10 High
    CVE-2026-18513 Auth required

    IBM Maximo Application Suite - Broken Access Control

    IBM Maximo Application Suite Location Service for Esri Component 9.2, 9.1, and 9.0 contains an improper access control vulnerability caused by a schema-less Custom Resource Definition, letting attackers bypass access restrictions, exploit requires no special privileges.