Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 23 of 677

  • 7.5 /10 High
    CVE-2026-76655 No auth

    HPE NonStop SNMP Trap Multiplexer - Remote Code Execution

    HPE NonStop SNMP Trap Multiplexer contains a remote code execution vulnerability, letting remote attackers execute arbitrary code, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-76519 CISA KEVPoC publicNo auth

    Cisco Secure Email Gateway - Unrestricted File Upload

    Cisco Secure Email Gateway contains an unrestricted file upload vulnerability caused by improper handling of email attachments in the Advanced Malware Protection feature, letting unauthenticated remote attackers write arbitrary files and execute commands with root privileges, exploit requires sending crafted email attachments.

  • 8.2 /10 High
    CVE-2026-73798 No auth

    HPE NonStop DNS - Denial of Service

    HPE NonStop DNS 9.2.3 Non Secure Version contains a denial of service vulnerability caused by unspecified issue, letting attackers cause service disruption, exploit requires no special conditions.

  • 7.9 /10 High
    CVE-2026-73793 Auth required

    HPE NonStop Middleware - Insecure Deserialization & Broken Authentication

    HPE NonStop Middleware contains a secret key handling and insecure deserialization vulnerability, letting attackers potentially tamper with data or escalate privileges, exploit requires specific conditions not detailed.

  • 8.2 /10 High
    CVE-2026-73790 No auth

    HPE NonStop iTP WebServer - Denial of Service

    HPE NonStop iTP WebServer contains a memory corruption vulnerability causing system shutdown, letting attackers cause denial of service, exploit requires no special conditions.

  • 7.5 /10 High
    CVE-2026-73261 No auth

    Mongoose - Denial of Service

    Mongoose < 7.23 contains a denial of service caused by improper TCP option length validation in src/net_builtin.c, letting unauthenticated remote peers corrupt MSS value and cause truncated payloads, exploit requires network access.

  • 7.5 /10 High
    CVE-2026-73260 No auth

    Mongoose - Denial of Service

    Mongoose < 7.23 contains a denial of service caused by improper length verification in the built-in TLS certificate parser, letting unauthenticated malicious TLS servers or clients trigger out-of-bounds reads during handshake.

  • 7.5 /10 High
    CVE-2026-73252 No auth

    Mongoose - Denial of Service

    Mongoose < 7.23 contains a denial of service caused by improper TLS 1.3 record size validation in mg_tls_recv_record(), letting unauthenticated malicious TLS peers trigger heap out-of-bounds read, exploit requires network access.

  • 8.2 /10 High
    CVE-2026-71854 No auth

    OpenAEV - Broken Access Control

    OpenAEV < 2.260622.0 contains a broken access control vulnerability caused by unauthenticated access to /api/player/** endpoints trusting client-supplied userId, letting unauthenticated attackers read and modify lessons data, exploit requires knowledge of exercise UUID.

  • 8.8 /10 High
    CVE-2026-71184 Auth required

    Gitea - Broken Access Control

    Gitea contains a broken access control vulnerability caused by pull request review notifier not attaching pull requests to Actions notifications, letting attackers execute fork-controlled workflow code on base repository runners without maintainer approval, exploit requires pull request review events.

  • 8.1 /10 High
    CVE-2026-66877 Auth required

    Gitea - Broken Access Control

    Gitea contains a broken access control vulnerability caused by improper re-checking of job approval in workflow dispatch, letting unreviewed workflow code execute on self-hosted runners, exploit requires fork contributor approval bypass.

  • 8.8 /10 High
    CVE-2026-63626 No auth

    Mongoose - Buffer Overflow

    Mongoose < 7.23 contains a buffer overflow caused by improper validation of the IPv6CP length field in ppp_handle_ipv6cp(), letting unauthenticated adjacent peers cause memory corruption or denial of service, exploit requires adjacent PPP or PPPoE link with specific features enabled.

  • 7.1 /10 High
    CVE-2026-61844 Auth required

    FileRise - Broken Access Control

    FileRise < 3.18.0 contains a broken access control vulnerability caused by metadata filename collisions due to path flattening, letting low-privileged users alter folder metadata to gain unauthorized read and edit access, exploit requires attacker to control a colliding folder and have read_own access.

  • 8.2 /10 High
    CVE-2026-61843 No auth

    FileRise - Unrestricted File Upload

    FileRise < 3.18.0 contains an insecure file upload vulnerability caused by failure to reject existing filenames in shared-folder and upload-only links, letting unauthenticated visitors with valid share tokens overwrite files silently, exploit requires valid share token and any configured share password.

  • 9.8 /10 Critical
    CVE-2026-59774 CISA KEVPoC publicNo auth

    go-gitea Gitea - Unauthenticated Arbitrary File Read

    go-gitea Gitea versions 1.22.1 through 1.27.0 contain a path traversal vulnerability due to improper initialization of the go-org markup renderer's ReadFile callback, allowing unauthenticated attackers to read arbitrary files accessible to the service user.