Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10425
Critical
1916
CISA KEV
79
Public PoC
384

Most common types

  • Broken Access Control 1290
  • Privilege Escalation 1190
  • Remote Code Execution 1111
  • Authentication Bypass 835
  • Denial of Service 799

Published per day, last 14 days

7 Oct Critical Other 20 Oct

Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 236 of 695

  • 7.0 /10 High
    CVE-2026-98360 Auth required

    Linux Kernel RDMA/rxe - Use After Free

    Linux kernel RDMA/rxe contains a use-after-free vulnerability caused by premature insertion of multicast groups into mcg_tree before rxe_mcast_add() succeeds, letting local userspace RDMA clients cause memory corruption, exploit requires local user access.

  • 7.0 /10 High
    CVE-2026-98359 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in RDMA core due to ib_get_eth_speed invoking ethtool callback on unregistering net_device, letting attackers cause denial of service, exploit requires asynchronous RDMA port query.

  • 8.1 /10 High
    CVE-2026-98357

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in IB/isert caused by missing synchronization of deferred control PDU completions before connection release, letting attackers cause memory corruption, exploit requires triggering deferred completions during connection teardown.

  • 7.1 /10 High
    CVE-2026-98349 No auth

    Linux Kernel wifi libipw - Buffer Over-read

    Linux kernel wifi libipw contains a buffer over-read caused by incorrect length calculation in libipw_process_probe_response and libipw_network_init, letting attackers cause memory corruption by sending too-short beacon or probe responses, exploit requires crafted management frames.

  • 7.1 /10 High
    CVE-2026-98348 No auth

    Linux Kernel - Out of Bounds Read

    Linux kernel contains a buffer overflow caused by improper length calculation in libipw_handle_assoc_resp() when processing too-short association responses, letting attackers cause out-of-bounds read, exploit requires crafted management frames.

  • 7.8 /10 High
    CVE-2026-98341 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in cfg80211 during asynchronous scan request cancellation, letting attackers cause kernel memory corruption, exploit requires triggering interface down during scan.

  • 8.8 /10 High
    CVE-2026-98339 No auth

    Linux Kernel - Denial of Service

    Linux kernel contains a logic flaw in cfg80211 where stale BSS entries are not properly removed due to BSS type filtering, letting rogue APs cause inconsistent BSS state, exploit requires rogue AP to trigger.

  • 7.0 /10 High
    CVE-2026-98331

    Linux Kernel mac80211 - Use After Free

    Linux kernel mac80211 component contains a use-after-free vulnerability caused by not removing virtual interfaces when their network device is unregistered, letting attackers cause kernel crashes (DoS), exploit requires triggering net device unregistration under specific conditions.

  • 7.0 /10 High
    CVE-2026-98330 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in cfg80211 when a network namespace is destroyed and wiphy is not properly moved, letting attackers cause kernel mode faults and potential denial of service, exploit requires triggering network namespace destruction.

  • 7.8 /10 High
    CVE-2026-98324 Auth required

    Linux Kernel dmaengine pxa - Logic Error

    Linux kernel dmaengine pxa contains a logic error caused by double counting hardware descriptors in pxad_alloc_desc, letting attackers potentially cause memory corruption or instability, exploit requires kernel-level access.

  • 9.8 /10 Critical
    CVE-2026-98323 No auth

    Linux kernel RDMA/siw - Out of Bounds Write

    Linux kernel RDMA/siw contains an out-of-bounds write caused by incorrect header copy length calculation in siw_get_hdr(), letting attackers trigger memory corruption via fragmented extended DDP/RDMAP headers, exploit requires crafted TCP packets.

  • 7.8 /10 High
    CVE-2026-98320

    Linux Kernel netfilter - Use After Free

    Linux kernel netfilter flowtable contains a use-after-free vulnerability caused by premature release of connection tracking references, letting attackers cause memory corruption or denial of service, exploit requires kernel module usage.

  • 7.8 /10 High
    CVE-2026-98318 Auth required

    Linux kernel smb client - Buffer Overflow

    Linux kernel smb client contains a buffer overflow caused by improper validation of absolute native symlink targets without NT drive prefix, letting users with write access to mounted shares trigger memory corruption.

  • 7.8 /10 High
    CVE-2026-98315

    Linux Kernel ntfs - Race Condition

    Linux kernel ntfs subsystem contains a race condition caused by unprotected runlist updates in ntfs_non_resident_attr_shrink and ntfs_attr_map_cluster functions, letting attackers cause data corruption or volume errors, exploit requires concurrent access to NTFS volume.

  • 7.8 /10 High
    CVE-2026-98311

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability caused by transferring operstate before register_netdevice in virt_wifi_newlink(), letting attackers cause denial of service, exploit requires triggering device registration failure.