Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10425
Critical
1916
CISA KEV
79
Public PoC
384

Most common types

  • Broken Access Control 1290
  • Privilege Escalation 1190
  • Remote Code Execution 1111
  • Authentication Bypass 835
  • Denial of Service 799

Published per day, last 14 days

7 Oct Critical Other 20 Oct

Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 237 of 695

  • 7.8 /10 High
    CVE-2026-98305 Auth required

    Linux kernel net: dsa: mxl862xx - Use After Free

    Linux kernel net: dsa: mxl862xx contains a use-after-free vulnerability caused by improper handling of stats poll during teardown, letting attackers cause system instability or denial of service, exploit requires triggering device teardown or failed registration.

  • 7.5 /10 High
    CVE-2026-98290 No auth

    Linux Kernel Bluetooth RFCOMM - Denial of Service

    Linux kernel Bluetooth RFCOMM contains a deadlock vulnerability caused by socket lock inversion in listener cleanup, letting attackers cause denial of service by triggering a deadlock, exploit requires ability to initiate Bluetooth connections.

  • 8.8 /10 High
    CVE-2026-98283 Auth required

    Linux Kernel KVM PPC Book3S HV - Use After Free

    Linux kernel KVM PPC Book3S HV contains a use-after-free vulnerability caused by improper reference handling in kvmhv_emulate_tlbie_all_lpid(), letting concurrent vCPUs access freed memory, exploit requires concurrent nested guest vCPU execution.

  • 8.8 /10 High
    CVE-2026-98282 Auth required

    Linux Kernel - Integer Overflow

    Linux kernel contains an integer overflow vulnerability in powerpc/iommu due to improper validation of npages in iommu_tce_check_ioba, letting attackers cause potential memory corruption, exploit requires crafted input with npages > 1.

  • 7.8 /10 High
    CVE-2026-98281 Auth required

    Linux Kernel - Race Condition

    Linux kernel contains a race condition in futex handling caused by missing private hash allocation on vfork(), letting attackers cause inconsistent futex state, exploit requires use of vfork() or CLONE_VM.

  • 7.8 /10 High
    CVE-2026-98276

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability caused by improper locking of sk_flags in sock_gettstamp(), letting attackers cause kernel memory corruption via race conditions, exploit requires concurrent socket operations.

  • 8.1 /10 High
    CVE-2026-98261 No auth

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in cifs_chan_skip_or_disable() caused by improper handling of server and channel references, letting attackers cause memory corruption or denial of service, exploit requires crafted network interaction.

  • 7.8 /10 High
    CVE-2026-98260 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability caused by delayed cleanup of POSIX timers after de_thread() during exec, letting attackers cause kernel memory corruption, exploit requires triggering execve failure in non-leader threads.

  • 7.8 /10 High
    CVE-2026-98258 Auth required

    Linux Kernel - Use-After-Free

    Linux kernel contains a use-after-free vulnerability in POSIX CPU timers caused by improper handling of timer firing state during expiry list operations, letting attackers cause memory corruption, exploit requires triggering timer expiry and deletion race conditions.

  • 7.5 /10 High
    CVE-2026-98257 No auth

    Linux Kernel - Denial of Service

    Linux kernel contains a deadlock vulnerability in rds_ib_cm_connect_complete() caused by improper use of rds_conn_destroy() on protocol version mismatch, letting attackers cause a denial of service by stalling RDS connection workqueues, exploit requires triggering a protocol version mismatch.

  • 7.8 /10 High
    CVE-2026-98256 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in signal handling caused by race conditions during exec() in __send_signal_locked, letting attackers cause kernel memory corruption, exploit requires triggering non-leader execve with posix timer signals.

  • 7.8 /10 High
    CVE-2026-98254 Auth required

    Linux Kernel - Data Corruption

    Linux kernel contains a data corruption vulnerability caused by incorrect address adjustment in swiotlb_bounce() during highmem page lookup, letting attackers cause stale or incorrect DMA data, exploit requires crafted DMA operations.

  • 7.8 /10 High
    CVE-2026-98253 Auth required

    Linux Kernel RDMA/ucma - Use After Free

    Linux kernel RDMA/ucma contains a race condition caused by improper mutex handling in rdma_join_multicast and rdma_leave_multicast functions, letting concurrent join and leave calls cause use-after-free, exploit requires concurrent multicast join calls.

  • 7.0 /10 High
    CVE-2026-98252

    Linux Kernel - Race Condition

    Linux kernel contains a reference count bug in iwpm_get_nlmsg_request() caused by improper initialization order of refcount and list_add_tail(), letting concurrent CPUs cause refcount addition on zero, exploit requires concurrent access to global list.

  • 7.8 /10 High
    CVE-2026-98251

    Linux Kernel openvswitch - Use After Free

    Linux kernel openvswitch contains a use-after-free vulnerability caused by reallocating confirmed conntrack labels in ovs_ct_get_conn_labels(), letting concurrent CPU access cause memory corruption, exploit requires concurrent access to conntrack entries.