Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10425
Critical
1916
CISA KEV
79
Public PoC
384

Most common types

  • Broken Access Control 1290
  • Privilege Escalation 1190
  • Remote Code Execution 1111
  • Authentication Bypass 835
  • Denial of Service 799

Published per day, last 14 days

7 Oct Critical Other 20 Oct

Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 269 of 695

  • 7.0 /10 High
    CVE-2026-58880 Auth required

    Bluetooth Stack - Race Condition

    Bluetooth stack in handle_app_val_response of btif_rc.cc contains a race condition leading to code execution, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.5 /10 High
    CVE-2026-58865 No auth

    PduParser - Denial of Service

    PduParser contains a persistent denial of service caused by missing bounds checks in multiple functions, letting remote attackers cause denial of service without requiring user interaction.

  • 7.8 /10 High
    CVE-2026-58859 Auth required

    Unknown - Denial of Service & Privilege Escalation

    Unknown product contains a denial of service caused by uncaught exceptions in multiple places, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-58854 Auth required

    Generic Software - Privilege Escalation

    Affected software contains a type confusion vulnerability causing memory corruption, letting local attackers escalate privileges without needing additional execution rights or user interaction.

  • 7.8 /10 High
    CVE-2026-58841 Auth required

    VirtualAudioControllerTest - Broken Access Control

    VirtualAudioControllerTest.java contains a permission bypass caused by a logic error in multiple functions, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 8.8 /10 High
    CVE-2026-58835 Auth required

    btif_storage.cc - Remote Code Execution

    btif_storage.cc contains an out-of-bounds write caused by a heap buffer overflow in cfg2prop, letting remote attackers execute arbitrary code without additional privileges, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-58815 Auth required

    Unknown - Out of Bounds Write

    Unknown product contains an out of bounds write caused by incorrect bounds check, letting local attackers escalate privileges without additional execution privileges, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-55286 Auth required

    stpropnci - Privilege Escalation

    stpropnci contains an out of bounds write caused by incorrect bounds check in stpropnci_process, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 8.8 /10 High
    CVE-2026-55280 Auth required

    Multiple Products - Privilege Escalation

    Multiple products contain an out-of-bounds write caused by uninitialized data, letting remote attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-55270 Auth required

    Generic Software - Privilege Escalation

    A software contains a permission bypass caused by a confused deputy issue in dialInternal, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-55269 Auth required

    snoop_logger.cc - Memory Safety

    snoop_logger.cc contains a memory safety issue caused by improper input validation in FilterCapturedPacket, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-55266 Auth required

    libufdt - Privilege Escalation

    libufdt contains an out-of-bounds write caused by resource exhaustion in qsort of libufdt_sysdeps_vendor.c, letting local attackers escalate privileges without additional execution privileges, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-49937 Auth required

    MessageQueueBase - Privilege Escalation

    MessageQueueBase contains an out of bounds read caused by incorrect bounds check in multiple functions, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-49933 Auth required

    Microsoft Bluetooth - Privilege Escalation

    Microsoft Bluetooth privileged process contains a local privilege escalation caused by uninitialized pointer dereference in handle_le_monitor_device_event, letting local attackers hijack control flow, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-49885 Auth required

    rw_t4t - Integer Overflow

    rw_t4t.cc contains an integer overflow in rw_t4t_update_file causing an out-of-bounds write, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.