Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10425
Critical
1916
CISA KEV
79
Public PoC
384

Most common types

  • Broken Access Control 1290
  • Privilege Escalation 1190
  • Remote Code Execution 1111
  • Authentication Bypass 835
  • Denial of Service 799

Published per day, last 14 days

7 Oct Critical Other 20 Oct

Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 270 of 695

  • 7.8 /10 High
    CVE-2026-49880 Auth required

    nfa_nfcee_act.cc - Out of Bounds Write

    nfa_nfcee_act.cc contains an out-of-bounds write caused by missing bounds check in multiple functions, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.2 /10 High
    CVE-2026-49878 Auth required

    wpas_handle_robust_av_scs_recv_action - Buffer Overflow

    A vulnerability in wpas_handle_robust_av_scs_recv_action of robust_av.c contains a buffer overflow caused by a logic error, letting remote attackers execute code with system privileges, exploit requires no user interaction.

  • 8.8 /10 High
    CVE-2026-45524 Auth required

    WifiPermissionsUtil - Broken Access Control

    WifiPermissionsUtil in isSystem method contains a missing permission check causing a sandbox escape, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 9.8 /10 Critical
    CVE-2026-37719 No auth

    dormakaba evolo Service - Remote Code Execution

    dormakaba evolo Service contains a remote code execution caused by a vulnerability in a .NET component, letting remote attackers execute arbitrary code as SYSTEM, exploit requires network access.

  • 7.8 /10 High
    CVE-2026-28648 Auth required

    Settings - Privilege Escalation

    Settings contains a permission bypass caused by a confused deputy issue, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28647 Auth required

    DeviceAdminAppsPreferenceController - Broken Access Control

    DeviceAdminAppsPreferenceController contains a permission bypass caused by a logic error in updateState method, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28641 Auth required

    ApplicationActionButtonsPreferenceController - Broken Access Control

    ApplicationActionButtonsPreferenceController contains a permission bypass caused by a logic error in shouldDisableUninstallButton, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28640 Auth required

    Android CredentialStorageActivity - Broken Access Control

    CredentialStorageActivity in Android contains a permission bypass caused by improper input validation in checkCallerIsCertInstallerOrSelfInProfile, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28625 Auth required

    Affected product - Broken Access Control

    Affected product contains a permission bypass caused by a logic error in multiple locations, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 9.3 /10 Critical
    CVE-2026-21589 CISA KEVPoC publicNo auth

    Atlassian Data Center - Arbitrary File Access

    Atlassian Bitbucket, Confluence, Jira Service Management, Jira Software, Bamboo, Crowd, Crucible, and Fisheye Data Center versions contain an arbitrary file access vulnerability caused by improper access control in the web application root directory, letting unauthenticated attackers access specific files with prior knowledge of exact file names and paths, exploit requires prior knowledge of target file path.

  • 8.8 /10 High
    CVE-2026-20586 No auth

    vdec - Privilege Escalation

    vdec contains an out of bounds write caused by missing bounds check, letting remote attackers escalate privileges, exploit requires user interaction.

  • 8.4 /10 High
    CVE-2026-20531 No auth

    apu - Use After Free

    apu contains a use after free vulnerability caused by improper memory management, letting local attackers escalate privileges without additional execution privileges, exploit requires no user interaction.

  • 7.5 /10 High
    CVE-2026-20526 No auth

    Modem - Privilege Escalation

    Modem contains an out of bounds write caused by missing bounds check, letting remote attackers escalate privileges if a UE connects to a rogue base station, exploit requires user interaction.

  • 8.4 /10 High
    CVE-2026-20524 No auth

    apu - Privilege Escalation

    apu contains a memory corruption caused by improper input validation, letting local attackers escalate privileges without additional execution privileges, exploit requires no user interaction.

  • 8.4 /10 High
    CVE-2026-20523 No auth

    Neuropilot - Privilege Escalation

    Neuropilot contains an out of bounds write caused by a missing bounds check, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.