Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10425
Critical
1916
CISA KEV
79
Public PoC
384

Most common types

  • Broken Access Control 1290
  • Privilege Escalation 1190
  • Remote Code Execution 1111
  • Authentication Bypass 835
  • Denial of Service 799

Published per day, last 14 days

7 Oct Critical Other 20 Oct

Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 241 of 695

  • 7.8 /10 High
    CVE-2026-79808 Auth required

    ClearPass Policy Manager - Buffer Overflow

    ClearPass Policy Manager contains a buffer overflow caused by improper handling in the OnGuard agent, letting authenticated local users execute arbitrary code with elevated privileges or cause denial of service.

  • 7.8 /10 High
    CVE-2026-79807 Auth required

    ClearPass Policy Manager - Privilege Escalation

    ClearPass Policy Manager Windows client contains a privilege escalation vulnerability caused by missing integrity verification, letting local malicious users execute code with elevated privileges, exploit requires local access.

  • 7.8 /10 High
    CVE-2026-79806 Auth required

    ClearPass Policy Manager OnGuard Linux agent - Privilege Escalation

    ClearPass Policy Manager OnGuard Linux agent contains a privilege escalation vulnerability caused by improper privilege management, letting malicious users escalate to root privileges on the Linux client, exploit requires local access.

  • 9.8 /10 Critical
    CVE-2026-79805 No auth

    ClearPass Policy Manager - Path Traversal

    ClearPass Policy Manager contains a path traversal caused by authenticated access, letting attackers read and modify certain files on the underlying operating system, exploit requires authentication.

  • 8.8 /10 High
    CVE-2026-79803 Auth required

    ClearPass Policy Manager - Command Injection

    ClearPass Policy Manager contains a command injection caused by improper input handling in the API, letting authenticated remote attackers escalate privileges and gain administrative control.

  • 8.8 /10 High
    CVE-2026-79802 No auth

    ClearPass Policy Manager - Command Injection

    ClearPass Policy Manager contains a command injection caused by crafted input in client software, letting attackers execute arbitrary commands with elevated privileges on the affected host, exploit requires attacker to supply crafted input.

  • 9.8 /10 Critical
    CVE-2026-79801 No auth

    HPE Networking ClearPass Policy Manager - Remote Code Execution

    HPE Networking ClearPass Policy Manager client agent contains a missing integrity verification vulnerability, letting unauthenticated remote attackers execute arbitrary code, exploit requires no special privileges.

  • 8.8 /10 High
    CVE-2026-79800 Auth required

    ClearPass Policy Manager - Path Traversal & Privilege Escalation

    ClearPass Policy Manager contains a path traversal caused by improper input validation in the command line interface, letting low-privileged authenticated remote attackers execute arbitrary code with elevated privileges.

  • 8.8 /10 High
    CVE-2026-79799 No auth

    ClearPass Policy Manager - Stored XSS

    ClearPass Policy Manager contains a stored XSS caused by improper input sanitization in the web-based management interface, letting unauthenticated remote attackers execute arbitrary script code in an admin's browser, exploit requires victim admin interaction.

  • 9.9 /10 Critical
    CVE-2026-79798 Auth required

    ClearPass Policy Manager - SQL Injection

    ClearPass Policy Manager contains a SQL injection caused by improper input sanitization in the web-based management interface, letting low-privileged authenticated remote attackers execute arbitrary database commands.

  • 8.8 /10 High
    CVE-2026-79797 No auth

    HPE Networking ClearPass Policy Manager - Broken Access Control

    HPE Networking ClearPass Policy Manager Android client contains an improper access control vulnerability caused by untrusted sources invoking application functionality, letting unauthenticated remote attackers obtain sensitive information, exploit requires user interaction.

  • 9.8 /10 Critical
    CVE-2026-79796 No auth

    ClearPass Policy Manager - Authentication Bypass

    ClearPass Policy Manager contains an authentication bypass vulnerability caused by flaws in the affected interface, letting unauthenticated remote attackers gain unauthorized access, exploit requires no special privileges.

  • 9.1 /10 Critical
    CVE-2026-79794 Auth required

    ClearPass Policy Manager - SQL Injection

    ClearPass Policy Manager contains a sql injection caused by improper input sanitization in the web-based management interface, letting authenticated remote attackers execute arbitrary database commands.

  • 9.1 /10 Critical
    CVE-2026-77178 No auth

    Oracle VM VirtualBox - Out of Bounds Write

    Oracle VM VirtualBox < 7.2.8 contains an out-of-bounds write caused by improper handling in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet network device model, letting guest OS users cause memory corruption on the host OS, exploit requires guest OS access.

  • 9.8 /10 Critical
    CVE-2026-76754 No auth

    ClearPass Policy Manager - SQL Injection

    ClearPass Policy Manager contains a sql injection caused by improper input sanitization in an affected interface, letting unauthenticated remote attackers execute arbitrary database commands, exploit requires no special privileges.