Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10425
Critical
1916
CISA KEV
79
Public PoC
384

Most common types

  • Broken Access Control 1290
  • Privilege Escalation 1190
  • Remote Code Execution 1111
  • Authentication Bypass 835
  • Denial of Service 799

Published per day, last 14 days

7 Oct Critical Other 20 Oct

Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 212 of 695

  • 7.5 /10 High
    CVE-2026-84275 No auth

    IBM Guardium Data Protection - Path Traversal

    IBM Guardium Data Protection 12.2 contains a path traversal caused by improper validation in the GIM file-upload functionality, letting unauthenticated attackers write arbitrary files to the Collector, exploit requires no authentication.

  • 9.8 /10 Critical
    CVE-2026-84272 No auth

    IBM Guardium Data Protection - Authentication Bypass

    IBM Guardium Data Protection 12.1 and 12.2.2 contain a missing authentication vulnerability in the edge-controller component, letting unauthenticated remote attackers execute arbitrary container images and control managed edge clusters.

  • 7.8 /10 High
    CVE-2026-84271 Auth required

    IBM Guardium Data Protection - Authentication Bypass

    IBM Guardium Data Protection 12.2 contains a signature verification bypass caused by a flaw in the patch installer, letting local attackers execute arbitrary code with root privileges, exploit requires local access.

  • 8.4 /10 High
    CVE-2026-84250 No auth

    IBM Guardium Data Protection - Privilege Escalation

    IBM Guardium Data Protection 12.2 contains weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component, letting local attackers recover root password and gain root privileges, exploit requires local access.

  • 9.8 /10 Critical
    CVE-2026-84249 No auth

    IBM Guardium Data Protection - Authentication Bypass

    IBM Guardium Data Protection 12.2 and 12.2.2 contain an authentication bypass caused by missing authentication for critical management functions, letting remote attackers execute arbitrary management operations, exploit requires no special privileges.

  • 8.1 /10 High
    CVE-2026-84247 Auth required

    IBM Guardium Data Protection - Path Traversal

    IBM Guardium Data Protection 12.2 contains a path traversal vulnerability that allows a remote authenticated attacker to cause denial of service by accessing unintended file paths.

  • 8.1 /10 High
    CVE-2026-84246 No auth

    IBM Guardium Data Protection - Buffer Overflow

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 contain a buffer overflow vulnerability in an unspecified component, letting remote attackers execute arbitrary code remotely, exploit requires network access.

  • 7.8 /10 High
    CVE-2026-84245 Auth required

    IBM Guardium Data Protection - Privilege Escalation

    IBM Guardium Data Protection 12.2 contains a local privilege escalation caused by a vulnerability in the cp_wrapper component, letting low-privileged local users gain root privileges and access or modify sensitive system files, exploit requires local access.

  • 9.3 /10 Critical
    CVE-2026-84244 No auth

    IBM Guardium Data Protection - Stored XSS

    IBM Guardium Data Protection 12.2 contains a stored cross-site scripting caused by improper sanitization in the Quick Search results grid, letting unauthenticated attackers execute malicious scripts in authenticated users' browsers, exploit requires influencing monitored database traffic.

  • 7.5 /10 High
    CVE-2026-84230 No auth

    IBM Guardium Data Protection - Denial of Service

    IBM Guardium Data Protection 12.2.2 contains a denial of service caused by a race condition from concurrent unsynchronized writes to a shared map, letting remote attackers cause service disruption, exploit requires no special conditions.

  • 8.1 /10 High
    CVE-2026-84209 No auth

    IBM Guardium Data Protection - SQL Injection

    IBM Guardium Data Protection 12.2.2 and 12.1 contain a SQL injection caused by improper neutralization of special elements in SQL commands, letting remote attackers execute arbitrary SQL commands, exploit requires network access.

  • 8.1 /10 High
    CVE-2026-84198 No auth

    IBM Guardium Data Protection - Buffer Overflow

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 contain a buffer overflow vulnerability in an unspecified component, letting remote attackers execute arbitrary code remotely, exploit requires network access.

  • 8.1 /10 High
    CVE-2026-84058 No auth

    IBM Guardium Data Protection - Buffer Overflow

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 contain a buffer overflow caused by improper handling of TDS PRELOGIN packets, letting remote attackers cause denial of service or execute arbitrary code, exploit requires network access to the Collector.

  • 8.1 /10 High
    CVE-2026-84057 No auth

    IBM Guardium Data Protection - Command Injection

    IBM Guardium Data Protection 12.2.2 and 12.1 contain a command injection caused by improper neutralization of special elements in OS commands, letting remote attackers execute arbitrary commands, exploit requires network access.

  • 8.1 /10 High
    CVE-2026-84035 No auth

    IBM Guardium Data Protection - Buffer Overflow

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 contain a buffer overflow caused by improper handling of input, letting remote attackers execute arbitrary code remotely, exploit requires network access.