Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10425
Critical
1916
CISA KEV
79
Public PoC
384

Most common types

  • Broken Access Control 1290
  • Privilege Escalation 1190
  • Remote Code Execution 1111
  • Authentication Bypass 835
  • Denial of Service 799

Published per day, last 14 days

7 Oct Critical Other 20 Oct

Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 243 of 695

  • 7.1 /10 High
    CVE-2026-70411 No auth

    Dell Container Storage Modules - Broken Access Control

    Dell Container Storage Modules (CSM) < 1.18.0 contains a missing authentication for critical function caused by lack of authentication in csm-authorization-tenant gRPC service, letting unauthenticated adjacent network attackers create tenants, inject roles, and modify storage access control flags.

  • 7.5 /10 High
    CVE-2026-70357 No auth

    Gitea - Server Side Request Forgery

    Gitea contains a server-side request forgery caused by hostname validation bypass in repository migration, letting attackers control DNS to reach blocked internal addresses during Git clone, exploit requires ability to start migration and control destination DNS.

  • 9.6 /10 Critical
    CVE-2026-67273 Auth required

    Dell Container Storage Modules - Privilege Escalation

    Dell Container Storage Modules < 1.18.0 contain a template injection caused by improper neutralization of special elements in the template engine, letting low privileged remote attackers escalate privileges, exploit requires remote access.

  • 8.2 /10 High
    CVE-2026-67270

    Dell Container Storage Modules - Improper Certificate Validation

    Dell Container Storage Modules (CSM) < 1.18.0 contains an improper certificate validation vulnerability in the proxy-server component, letting unauthenticated adjacent network attackers expose storage backend administrator credentials, exploit requires network adjacency.

  • 9.9 /10 Critical
    CVE-2026-67269 Auth required

    Dell Container Storage Modules (CSM) Operator - Privilege Escalation

    Dell Container Storage Modules (CSM) Operator < 1.18.0 contains an improper privilege management vulnerability in the ContainerStorageModule Custom Resource reconciler, letting low privileged remote attackers escalate privileges to root on cluster nodes, exploit requires low privileged access.

  • 7.8 /10 High
    CVE-2026-65142 No auth

    NVIDIA Model-Optimizer - Insecure Deserialization

    NVIDIA Model-Optimizer contains an insecure deserialization vulnerability caused by deserialization of untrusted data, letting attackers execute code, tamper data, cause denial of service, and disclose information, exploit requires crafted input.

  • 7.6 /10 High
    CVE-2026-63697 Auth required

    Dell System Update - Remote Code Execution

    Dell System Update < 2.3.0.0 contains an improper certificate validation vulnerability, letting high privileged remote attackers execute code remotely, exploit requires high privileges and remote access.

  • 10.0 /10 Critical
    CVE-2026-63692 No auth

    Dell Container Storage Modules - Authentication Bypass

    Dell Container Storage Modules < 1.18.0 contain a missing authentication for critical function vulnerability, letting unauthenticated remote attackers elevate privileges, exploit requires remote access.

  • 10.0 /10 Critical
    CVE-2026-63688 No auth

    Dell Container Storage Modules - Broken Access Control

    Dell Container Storage Modules (CSM) < v1.18.0 contains a missing authentication for critical function caused by lack of authentication in csm-authorization-storage gRPC server, letting unauthenticated remote attackers access storage backend administrator credentials.

  • 8.8 /10 High
    CVE-2026-62072 Auth required

    Progress Planner - Broken Access Control

    Progress Planner <= 1.10.0 contains a broken access control vulnerability caused by improper authorization checks, letting attackers access or modify unauthorized resources, exploit requires no special privileges.

  • 9.8 /10 Critical
    CVE-2026-61421 No auth

    Dell Container Storage Modules - Hardcoded Credentials

    Dell Container Storage Modules < 1.18.0 contain a hardcoded credentials vulnerability in CSM Authorization, letting unauthenticated remote attackers escalate privileges, exploit requires remote access.

  • 7.7 /10 High
    CVE-2026-61411 Auth required

    Dell Container Storage Modules - Information Disclosure

    Dell Container Storage Modules < 1.18.0 contain an insertion of sensitive information into log file vulnerability, letting low privileged remote attackers disclose information, exploit requires remote access.

  • 7.6 /10 High
    CVE-2026-59358 PoC publicAuth required

    Cloud Foundry UAA - Authentication Bypass

    Cloud Foundry UAA contains an authentication bypass caused by improper verification of Bearer credentials in the OAuth token endpoint, letting remote authenticated attackers obtain fully-privileged client_credentials tokens, exploit requires attacker to have a valid user access token for a client supporting both public authorization and client_credentials grant.

  • 7.8 /10 High
    CVE-2026-57559

    CVE-2026-57559

    Memory corruption while processing service requests.

  • 7.8 /10 High
    CVE-2026-57555

    Unknown - Memory Corruption

    Unknown vendor and product contain a memory corruption vulnerability caused by improper handling of user input buffers in system service routines, letting attackers cause memory corruption, exploit requires unspecified conditions.