Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10425
- Critical
- 1916
- CISA KEV
- 79
- Public PoC
- 384
Most common types
- Broken Access Control 1290
- Privilege Escalation 1190
- Remote Code Execution 1111
- Authentication Bypass 835
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 266 of 695
- 8.8 /10 HighCVE-2026-102163 No auth
Arista Access Points - Denial of Service & Remote Code Execution
Arista access points with Wireless Intrusion Prevention System (WIPS) active contain a denial of service and potential remote code execution vulnerability caused by crafted frames sent by unauthenticated attackers within RF proximity, letting attackers crash the sensor service or execute code remotely, exploit requires RF proximity without authentication.
- 8.8 /10 HighCVE-2026-102162 No auth
Arista Wi-Fi Access Points - Buffer Overflow
Arista Wi-Fi access points with captive portal or application firewall enabled contain a stack overflow in the wireless gateway service, letting unauthenticated network-adjacent attackers cause denial-of-service or execute arbitrary code, exploit requires crafted packet.
- 8.8 /10 HighCVE-2026-102161 No auth
CV-CUE - Authentication Bypass
CV-CUE contains an authentication bypass caused by source IP address forgery in client headers, letting unauthenticated attackers on adjacent networks gain administrative session privileges, exploit requires attacker to be on adjacent private network or routed through a reverse proxy.
- 7.2 /10 HighCVE-2026-102160 Auth required
CloudVision CUE - OS Command Injection
CloudVision CUE contains an OS command injection caused by crafted backup requests in backup management, letting authenticated Super Users execute arbitrary commands with service privileges.
- 9.8 /10 CriticalCVE-2026-102159 No auth
CV-CUE - Broken Access Control
CV-CUE backend contains an access control flaw allowing unauthenticated network attackers to access internal service functionality, potentially exposing sensitive location information or disrupting services, exploit requires network access.
- 8.5 /10 HighCVE-2026-102155 Auth required
Spectralight WiFi-server - XML External Entity Injection
Spectralight WiFi-server contains an XML External Entity (XXE) injection caused by improper XML input handling, letting authenticated users disclose local files and cause partial denial of service.
- 7.8 /10 HighCVE-2026-101258 No auth
Ghostscript - Command Injection
Ghostscript contains a command injection caused by memory corruption and disabling of internal path access controls during rendering of crafted PostScript or EPS documents, letting attackers execute arbitrary shell commands, exploit requires crafted document delivery.
- 8.8 /10 HighCVE-2026-101207 Auth required
Dell OpenManage Integration with Microsoft Windows Admin Center - OS Command Injection
Dell OpenManage Integration with Microsoft Windows Admin Center < 3.7.0 contains an OS command injection caused by improper neutralization of special elements, letting low privileged remote attackers execute arbitrary commands, exploit requires remote access.
- 8.4 /10 HighCVE-2026-101158 Auth required
Fileserver - Stored XSS
Fileserver upload API contains a stored XSS vulnerability caused by missing input validation, letting authenticated attackers with file upload privileges hijack user sessions and gain administrative access, exploit requires authentication with upload privileges.
- 8.7 /10 HighCVE-2026-101157 No auth
Unknown Product - Stored XSS
An unspecified product contains a stored XSS vulnerability caused by improper sanitization of user input, letting unauthenticated attackers with adjacent-network access inject malicious content that executes when authenticated users view it.
- 8.4 /10 HighCVE-2026-101156 Auth required
Unknown Product - Stored XSS
An unspecified product contains a stored XSS caused by improper sanitization of configuration input, letting authenticated high-privilege administrators execute scripts in other authenticated users' browsers, exploit requires high-privilege admin access.
- 9.1 /10 CriticalCVE-2026-101155 Auth required
Software Management Studio - Broken Access Control
Software Management Studio contains a broken access control vulnerability caused by improper validation of file operations in the Software Repository, letting authenticated attackers with specific permissions read or write files beyond intended scope, exploit requires specific permissions.
- 7.2 /10 HighCVE-2026-101154 Auth required
Platform - Broken Access Control
The platform contains a file read and write vulnerability caused by specially crafted requests or file uploads to the Network Provisioning Image Repository, letting authenticated remote attackers with specific permissions access or modify files beyond intended scope.
- 8.0 /10 HighCVE-2026-101153 Auth required
CloudVision Portal & Sensor - Path Traversal
CloudVision Portal (on-premises) and CloudVision Sensor contain a path traversal caused by insufficient validation, letting authenticated users with high privileges extract unintended data from the Sensor.
- 8.0 /10 HighCVE-2026-101152 No auth
CloudVision - Authentication Bypass
CloudVision contains a broken authentication caused by insufficient validation in the Single Sign-On (SSO) login flow, letting remote unauthenticated attackers redirect authentication material to attacker-controlled URLs, exploit requires user interaction.