Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10425
Critical
1916
CISA KEV
79
Public PoC
384

Most common types

  • Broken Access Control 1290
  • Privilege Escalation 1190
  • Remote Code Execution 1111
  • Authentication Bypass 835
  • Denial of Service 799

Published per day, last 14 days

7 Oct Critical Other 20 Oct

Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 227 of 695

  • 9.8 /10 Critical
    CVE-2026-76498 No auth

    Cisco Application Policy Infrastructure Controller - Broken Access Control

    Cisco Application Policy Infrastructure Controller contains improper access control vulnerabilities caused by insufficient authorization checks, letting attackers gain unauthorized access, exploit requires no special privileges.

  • 9.8 /10 Critical
    CVE-2026-76486

    Cisco NX-OS - Remote Code Execution & Denial of Service

    Cisco NX-OS Software contains a remote code execution and denial-of-service vulnerability caused by improper input validation in the VXLAN OAM (NGOAM) feature, letting unauthenticated remote attackers execute code with root privileges or cause device reloads, exploit requires NGOAM feature enabled.

  • 9.8 /10 Critical
    CVE-2026-76485

    Cisco NX-OS - Remote Code Execution & Denial of Service

    Cisco NX-OS Software contains a remote code execution and denial of service vulnerability caused by improper input validation in the VXLAN OAM feature, letting unauthenticated remote attackers execute code with root privileges or cause device reloads, exploit requires NGOAM feature enabled.

  • 8.8 /10 High
    CVE-2026-76484

    Cisco License On-Prem - Code Injection

    Cisco License On-Prem contains a code injection vulnerability caused by insufficient protection against code injection, letting attackers execute arbitrary code, exploit requires unspecified conditions.

  • 9.1 /10 Critical
    CVE-2026-76483 No auth

    Cisco License On-Prem - Hardcoded Credentials

    Cisco License On-Prem contains an insufficiently protected credentials vulnerability caused by weak credential protection, letting attackers potentially access sensitive credentials, exploit requires no special conditions.

  • 10.0 /10 Critical
    CVE-2026-76482

    Cisco License On-Prem - Improper Input Verification

    Cisco License On-Prem contains an improper input verification vulnerability caused by failure to properly verify inputs, letting attackers potentially exploit the system, exploit requires unspecified conditions.

  • 9.8 /10 Critical
    CVE-2026-76480 No auth

    Cisco License On-Prem - Authentication Bypass

    Cisco License On-Prem contains an authentication bypass caused by improper authentication implementation, letting attackers bypass authentication, exploit requires no special conditions.

  • 8.8 /10 High
    CVE-2026-76472

    CVE-2026-76472

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-76472 are related to issues with improper neutralization of special elements that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-74.

  • 9.8 /10 Critical
    CVE-2026-76471 No auth

    Cisco NX-OS - Command Injection

    Cisco NX-OS Software contains a command injection vulnerability in the NX-API due to insufficient input validation, letting unauthenticated remote attackers execute arbitrary code with root privileges or cause denial of service, exploit requires sending crafted HTTP requests.

  • 8.8 /10 High
    CVE-2026-76470

    CVE-2026-76470

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76470 are related to incorrect calculation issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-682.

  • 7.4 /10 High
    CVE-2026-76469

    CVE-2026-76469

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76469 are related to insufficient control flow management issues that are grouped under the Common Weakness Enumeration (CWE) CWE-691.

  • 8.2 /10 High
    CVE-2026-76468

    CVE-2026-76468

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76468 are related to improper input validation that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-20.

  • 7.5 /10 High
    CVE-2026-76467

    Cisco Networking - Resource Management Vulnerability

    Cisco networking products contain an improper control of resource through its lifetime vulnerability (CWE-664), letting attackers potentially cause resource mismanagement, exploit requires unspecified conditions.

  • 9.8 /10 Critical
    CVE-2026-76465 No auth

    Cisco NX-OS - Remote Code Execution & Denial of Service

    Cisco NX-OS Software for Cisco Nexus 3000 and 9000 Series Switches contains a remote code execution and denial of service vulnerability caused by improper validation of MPLS echo-request packets, letting unauthenticated remote attackers execute code with root privileges or cause device reload, exploit requires sending crafted MPLS echo-request packets.

  • 9.6 /10 Critical
    CVE-2026-76464 No auth

    Cisco Networking - Buffer Overflow

    Cisco networking products contain buffer overflow vulnerabilities caused by improper buffer management, letting attackers potentially cause denial of service or execute arbitrary code, exploit requires network access.