Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10203
- Critical
- 1875
- CISA KEV
- 79
- Public PoC
- 367
Most common types
- Broken Access Control 1267
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 194 of 681
- 8.8 /10 HighCVE-2026-94585 No auth
Brocade Fabric OS - Authentication Bypass
Brocade Fabric OS < 9.2.2d on MXG610 contains an authentication bypass caused by an unauthenticated endpoint in the Single Sign-On workflow, letting unauthenticated network-adjacent attackers gain administrative access.
- 7.8 /10 HighCVE-2026-94582
Brocade Fabric OS - Buffer Overflow
Brocade Fabric OS < 10.0.1 contains a buffer overflow caused by improper bounds checking in internal diagnostic and route validation routines of the FSPF protocol, letting attackers cause daemon crash or execute code, exploit requires chaining other vulnerabilities.
- 8.0 /10 HighCVE-2026-94579 Auth required
Brocade Fabric OS - Command Injection
Brocade Fabric OS < 9.2.2d and 10.0.0 through 10.0.0a1 contain an OS command injection caused by improper handling of shell metacharacters in usernames or profile identifiers during SSH session termination, letting authenticated users execute arbitrary commands with root privileges, exploit requires authentication via external directory or AAA service.
- 8.8 /10 HighCVE-2026-94578 Auth required
Brocade Fabric OS - Broken Access Control
Brocade Fabric OS < 10.0.1 contains a broken access control vulnerability caused by improper authorization logic in the AAA integration framework, letting remote authenticated users gain root-equivalent chassis access by crafted VSAs or directory claims.
- 7.8 /10 HighCVE-2026-94577 Auth required
Brocade Fabric OS - Privilege Escalation
Brocade Fabric OS < 9.2.2d and 10.0.0 through 10.0.0a1 contains a privilege escalation caused by improper CLI authorization handling, letting authenticated users bypass RBAC and elevate privileges to root, exploit requires authenticated user or local process.
- 8.0 /10 HighCVE-2026-94576 Auth required
Brocade Fabric OS - Authentication Bypass & Privilege Escalation
Brocade Fabric OS < 9.2.2d and 10.0.0 through 10.0.0a1 contain an authentication bypass and privilege escalation caused by flawed authorization checks in the account management interface, letting authenticated users escalate privileges by modifying other accounts, exploit requires authenticated user access.
- 9.9 /10 CriticalCVE-2026-94510 No auth
Microsoft Bookings - Authorization Bypass
Microsoft Bookings contains an authorization bypass caused by user-controlled key manipulation, letting unauthorized attackers elevate privileges over a network, exploit requires network access.
- 7.5 /10 HighCVE-2026-94440 No auth
Multipart Form Parser - Denial of Service
A multipart form parser contains a memory limit bypass caused by improper handling of remaining limit at the start of a part, letting attackers read arbitrarily long lines into memory, exploit requires crafted multipart requests.
- 7.5 /10 HighCVE-2026-94439 No auth
HTTP Server - HTTP Request Smuggling
An HTTP server improperly continues to read and serve HTTP requests after sending a 2xx response to an HTTP/1 CONNECT request without hijacking the connection, causing request smuggling due to tunnel misinterpretation.
- 7.1 /10 HighCVE-2026-93860 Auth required
OpenStack Mistral - Broken Access Control
OpenStack Mistral through 23.0.0 contains a broken access control caused by lack of policy enforcement in /v2/maintenance API controller, letting any valid token holder read and change cluster-wide maintenance state, exploit requires valid Mistral token.
- 8.7 /10 HighCVE-2026-93858 Auth required
OpenStack Mistral - Command Injection
OpenStack Mistral through 23.0.0 contains a command injection caused by passing user-supplied proxy_command to paramiko.ProxyCommand, letting authenticated project members execute arbitrary local commands, exploit requires authentication.
- 8.5 /10 HighCVE-2026-93699 Auth required
WP Toolkit for cPanel - Command Injection
WP Toolkit for cPanel contains a command injection caused by improper argument handling, letting local users execute arbitrary code as other accounts on the same server, exploit requires local access.
- 9.8 /10 CriticalCVE-2026-93034
SGLang - Remote Code Execution
SGLang contains a remote code execution vulnerability caused by unconditionally deserializing PickleWrapper payloads via pickle.loads() in the ZMQ message decoder, letting remote attackers execute arbitrary code, exploit requires data-parallel attention enabled with non-loopback --dist-init-addr.
- 7.7 /10 HighCVE-2026-93017 Auth required
OpenShift insights-operator-gather - Broken Access Control
OpenShift insights-operator-gather ClusterRole grants the operator's service account unrestricted read access to all secrets across all namespaces, letting attackers with gather service account access read any secret, exploit requires attacker to spawn a pod with the gather service account.
- 9.8 /10 CriticalCVE-2026-92555 PoC publicNo auth
AKIN Software AKINSOFT WOLVOX Control Panel - Information Disclosure
AKIN Software AKINSOFT WOLVOX Control Panel 26.02.25 before 26.02.26 contains an information disclosure vulnerability caused by insertion of sensitive information into sent data, letting attackers pull data from system resources, exploit requires network access.