Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10425
Critical
1916
CISA KEV
79
Public PoC
384

Most common types

  • Broken Access Control 1290
  • Privilege Escalation 1190
  • Remote Code Execution 1111
  • Authentication Bypass 835
  • Denial of Service 799

Published per day, last 14 days

7 Oct Critical Other 20 Oct

Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 229 of 695

  • 9.8 /10 Critical
    CVE-2026-62252

    Homer - Authentication Bypass

    Homer < 11.0.283 contains a broken authentication caused by default admin account with fixed password and no forced password change, letting attackers gain full administrative access, exploit requires access to login endpoint.

  • 8.1 /10 High
    CVE-2026-62251 Auth required

    Homer - SQL Injection

    Homer < 11.0.283 contains a SQL injection caused by unsanitized user-supplied 'rawquery' passed directly to DuckDB in V4StatisticsQuery handler, letting authenticated users execute arbitrary SQL, exploit requires authentication.

  • 9.1 /10 Critical
    CVE-2026-62176

    PraisonAI - Command Injection

    PraisonAI < 4.6.78 contains a command injection caused by direct interpolation of the agents_file parameter into an f-string executed via subprocess.Popen, letting attackers inject arbitrary Python code, exploit requires attacker control of agents_file input.

  • 8.1 /10 High
    CVE-2026-59347 No auth

    VMware Workstation and Fusion - Remote Code Execution

    VMware Workstation and Fusion 25H2, 26H1 contain a buffer overflow caused by a flaw in HGFS, letting local attackers with admin privileges on a VM execute code as the VMX process on the host, exploit requires local admin on VM.

  • 9.3 /10 Critical
    CVE-2026-59346 PoC publicNo auth

    VMware Workstation & Fusion - Integer Overflow

    VMware Workstation and Fusion 25H2 and 26H1 contain an integer overflow caused by improper handling in VMXNET3 virtual network adapter, letting local attackers with admin privileges on a VM execute code on the host, exploit requires local admin on VM.

  • 8.3 /10 High
    CVE-2026-58069 Auth required

    Veeam Backup & Replication - Broken Access Control

    Veeam Backup & Replication contains a file read vulnerability caused by improper access control, letting authenticated Cloud Connect tenants read arbitrary files on the service provider host, exploit requires tenant authentication.

  • 7.1 /10 High
    CVE-2026-5703 Auth required

    Satel Iberia SenNet Datalogger Serie 200 - Path Traversal

    Satel Iberia SenNet Datalogger Serie 200 contains a path traversal caused by URL manipulation in the web portal, letting authenticated users read arbitrary files or list directories accessible to the web server user.

  • 7.5 /10 High
    CVE-2026-56851 No auth

    Nickname profile - Denial of Service

    Nickname profile contains a buffer overflow caused by transforming crafted input into a short destination buffer, letting attackers cause application panic via out-of-bounds slice error, exploit requires crafted input.

  • 7.4 /10 High
    CVE-2026-46572 No auth

    NTFS-3G - Buffer Overflow

    NTFS-3G < 2026.7.7 contains a heap buffer overflow caused by improper handling in ntfs_ib_cut_tail() in libntfs-3g/index.c, letting attackers corrupt heap memory via crafted NTFS images, exploit requires crafted directory.

  • 8.1 /10 High
    CVE-2026-46570 No auth

    NTFS-3G - Buffer Overflow

    NTFS-3G < 2026.7.7 contains a heap buffer overflow caused by improper handling in ntfs_index_walk_down() in libntfs-3g/index.c, letting attackers corrupt heap memory via crafted NTFS image, exploit requires crafted file metadata.

  • 7.7 /10 High
    CVE-2026-46569 No auth

    NTFS-3G - Buffer Overflow

    NTFS-3G < 2026.7.7 contains a heap buffer overflow caused by improper handling in ntfs_ib_copy_tail() in libntfs-3g/index.c, letting attackers corrupt heap memory via crafted NTFS images, exploit requires creating or extending a directory.

  • 7.1 /10 High
    CVE-2026-46434 Auth required

    wger - Broken Access Control

    wger < 2.6 contains a broken access control vulnerability caused by improper privilege checks in UserDeactivateView, letting gym_trainer users deactivate higher-privileged accounts, exploit requires gym_trainer permission.

  • 7.1 /10 High
    CVE-2026-43976 Auth required

    wger - Broken Access Control

    wger < 2.6 contains a broken access control caused by flawed gym-scope guard allowing trainers with specific permissions and no gym assignment to read private data of unaffiliated users, exploit requires trainer permissions and no gym assignment.

  • 7.6 /10 High
    CVE-2026-42721 Auth required

    SERVIT Software Solutions affiliate-toolkit - SQL Injection

    SERVIT Software Solutions affiliate-toolkit <= 3.9.1 contains a sql injection caused by improper neutralization of special elements in SQL commands, letting attackers perform blind SQL injection remotely, exploit requires crafted requests.

  • 7.6 /10 High
    CVE-2026-42720 Auth required

    Sarah Giles Dynamic User Directory - SQL Injection

    Sarah Giles Dynamic User Directory <= 2.4 contains a sql injection caused by improper neutralization of special elements in SQL commands, letting attackers perform blind SQL injection remotely, exploit requires crafted input.