Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10425
- Critical
- 1916
- CISA KEV
- 79
- Public PoC
- 384
Most common types
- Broken Access Control 1290
- Privilege Escalation 1190
- Remote Code Execution 1111
- Authentication Bypass 835
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 271 of 695
- 8.4 /10 HighCVE-2026-20522 No auth
Neuropilot - Privilege Escalation
Neuropilot contains an out of bounds write caused by missing bounds check, letting local attackers escalate privileges without additional execution privileges, exploit requires no user interaction.
- 8.4 /10 HighCVE-2026-20521 No auth
Video HAL - Privilege Escalation
Video HAL contains a privilege escalation caused by a missing bounds check, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.
- 7.5 /10 HighCVE-2026-20520 No auth
Modem - Privilege Escalation
Modem contains an out of bounds write caused by missing bounds check, letting remote attackers escalate privileges if UE connects to a rogue base station, exploit requires no additional privileges or user interaction.
- 7.5 /10 HighCVE-2026-20519 No auth
Modem - Privilege Escalation
Modem contains an out of bounds write caused by missing bounds check, letting remote attackers escalate privileges if UE connects to a rogue base station, exploit requires no additional privileges or user interaction.
- 7.8 /10 HighCVE-2026-19185 Auth required
Zephyr OS - Broken Access Control
Zephyr OS with CONFIG_USERSPACE enabled contains a kernel memory disclosure and write vulnerability caused by improper validation of per-target data buffers in i3c_do_ccc() syscall, letting unprivileged user threads escalate to supervisor privileges by crafting malicious CCC payloads, exploit requires user-mode access to I3C controller device.
- 8.4 /10 HighCVE-2026-19184 Auth required
Zephyr ADC - Buffer Overflow
NXP GAU ADC driver in Zephyr with CONFIG_USERSPACE=y contains a buffer overflow caused by improper validation of buffer_size against active channels, letting user-mode attackers with ADC device access cause kernel memory corruption or privilege escalation, exploit requires user-mode access to ADC device.
- 7.8 /10 HighCVE-2026-12171 No auth
auto-changelog - Remote Code Execution
auto-changelog before 2.6.1 contains a remote code execution caused by loading and executing untrusted configuration and modules from attacker-controlled repositories, letting attackers execute arbitrary code with user or CI privileges, exploit requires running auto-changelog on untrusted repository content.
- 7.0 /10 HighCVE-2026-105773 Auth required
Canimaan Software ClamXAV - Privilege Escalation
Canimaan Software ClamXAV 3.3 - 3.11 contains a local privilege escalation caused by a race condition and insufficient file validation in the Privileged Helper Tool, letting local attackers execute arbitrary code with system privileges, exploit requires local access.
- 7.1 /10 HighCVE-2026-105761 Auth required
Dify - Broken Access Control
Dify < 1.16.0 contains a broken access control vulnerability caused by lack of ownership verification in AppMCPServerController.put() for MCP server updates, letting authenticated workspace members modify other applications' MCP servers, exploit requires authentication as workspace member.
- 7.5 /10 HighCVE-2026-105744 PoC publicNo auth
Docling - Command Injection
Docling 2.94.0 to 2.132.0 contains a file read and write vulnerability caused by unrestricted TeX primitives in the Tectonic LaTeX engine, letting attackers read and overwrite files or execute shell commands, exploit requires enabling tikz_engine="tectonic" option.
- 7.1 /10 HighCVE-2026-105741 Auth required
Langflow - Misconfiguration
Langflow 1.5.0 to 1.10.3 contains an IP spoofing vulnerability caused by improper validation of X-Forwarded-For header in MCP configuration installation endpoint, letting authenticated attackers bypass local-only restriction and overwrite configuration files.
- 9.9 /10 CriticalCVE-2026-105740 CISA KEVAuth required
Langflow - Remote Code Execution
Langflow < 1.9.0 contains a remote code execution caused by unsanitized command injection in MCP server with "Stdio" transport, letting authenticated users execute arbitrary commands on the server, exploit requires user authentication.
- 7.1 /10 HighCVE-2026-105699 Auth required
Langflow - Broken Access Control
Langflow 1.6.8 to 1.9.1 contains a broken access control vulnerability caused by lack of authorization checks on resource URIs in project-scoped MCP connections, letting authenticated users access other users' private flow files, exploit requires authenticated access to any project-scoped MCP endpoint.
- 9.9 /10 CriticalCVE-2026-105697
Langflow - Command Injection
Langflow < 1.10.3 contains a command injection caused by unsanitized user input in MCP server configuration commands, letting attackers execute arbitrary OS commands as the Langflow process user, exploit requires access to MCP server settings or MCP Tools component.
- 9.9 /10 CriticalCVE-2026-105691 Auth required
Penpot - Command Injection
Penpot < 2.18.0 contains a command injection caused by unsanitized fill-color value in SVG exporter executed via child_process.exec, letting attackers with file edit or public share link execute arbitrary commands, exploit requires file edit or access to malicious public share link.