Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
11502
Critical
2091
CISA KEV
92
Public PoC
393

Most common types

  • Broken Access Control 1499
  • Remote Code Execution 1456
  • Privilege Escalation 1227
  • Authentication Bypass 940
  • Denial of Service 799

Published per day, last 14 days

8 Oct Critical Other 21 Oct

Source: public CVE records (NVD, CISA KEV) · last published 21 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 308 of 767

  • 7.1 /10 High
    CVE-2026-98349 No auth

    Linux Kernel wifi libipw - Buffer Over-read

    Linux kernel wifi libipw contains a buffer over-read caused by incorrect length calculation in libipw_process_probe_response and libipw_network_init, letting attackers cause memory corruption by sending too-short beacon or probe responses, exploit requires crafted management frames.

  • 7.1 /10 High
    CVE-2026-98348 No auth

    Linux Kernel - Out of Bounds Read

    Linux kernel contains a buffer overflow caused by improper length calculation in libipw_handle_assoc_resp() when processing too-short association responses, letting attackers cause out-of-bounds read, exploit requires crafted management frames.

  • 7.8 /10 High
    CVE-2026-98341 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in cfg80211 during asynchronous scan request cancellation, letting attackers cause kernel memory corruption, exploit requires triggering interface down during scan.

  • 8.8 /10 High
    CVE-2026-98339 No auth

    Linux Kernel - Denial of Service

    Linux kernel contains a logic flaw in cfg80211 where stale BSS entries are not properly removed due to BSS type filtering, letting rogue APs cause inconsistent BSS state, exploit requires rogue AP to trigger.

  • 7.0 /10 High
    CVE-2026-98331

    Linux Kernel mac80211 - Use After Free

    Linux kernel mac80211 component contains a use-after-free vulnerability caused by not removing virtual interfaces when their network device is unregistered, letting attackers cause kernel crashes (DoS), exploit requires triggering net device unregistration under specific conditions.

  • 7.0 /10 High
    CVE-2026-98330 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in cfg80211 when a network namespace is destroyed and wiphy is not properly moved, letting attackers cause kernel mode faults and potential denial of service, exploit requires triggering network namespace destruction.

  • 7.8 /10 High
    CVE-2026-98324 Auth required

    Linux Kernel dmaengine pxa - Logic Error

    Linux kernel dmaengine pxa contains a logic error caused by double counting hardware descriptors in pxad_alloc_desc, letting attackers potentially cause memory corruption or instability, exploit requires kernel-level access.

  • 9.8 /10 Critical
    CVE-2026-98323 No auth

    Linux kernel RDMA/siw - Out of Bounds Write

    Linux kernel RDMA/siw contains an out-of-bounds write caused by incorrect header copy length calculation in siw_get_hdr(), letting attackers trigger memory corruption via fragmented extended DDP/RDMAP headers, exploit requires crafted TCP packets.

  • 7.8 /10 High
    CVE-2026-98320

    Linux Kernel netfilter - Use After Free

    Linux kernel netfilter flowtable contains a use-after-free vulnerability caused by premature release of connection tracking references, letting attackers cause memory corruption or denial of service, exploit requires kernel module usage.

  • 7.8 /10 High
    CVE-2026-98318 Auth required

    Linux kernel smb client - Buffer Overflow

    Linux kernel smb client contains a buffer overflow caused by improper validation of absolute native symlink targets without NT drive prefix, letting users with write access to mounted shares trigger memory corruption.

  • 7.8 /10 High
    CVE-2026-98315

    Linux Kernel ntfs - Race Condition

    Linux kernel ntfs subsystem contains a race condition caused by unprotected runlist updates in ntfs_non_resident_attr_shrink and ntfs_attr_map_cluster functions, letting attackers cause data corruption or volume errors, exploit requires concurrent access to NTFS volume.

  • 7.8 /10 High
    CVE-2026-98311

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability caused by transferring operstate before register_netdevice in virt_wifi_newlink(), letting attackers cause denial of service, exploit requires triggering device registration failure.

  • 7.8 /10 High
    CVE-2026-98305 Auth required

    Linux kernel net: dsa: mxl862xx - Use After Free

    Linux kernel net: dsa: mxl862xx contains a use-after-free vulnerability caused by improper handling of stats poll during teardown, letting attackers cause system instability or denial of service, exploit requires triggering device teardown or failed registration.

  • 7.5 /10 High
    CVE-2026-98290 No auth

    Linux Kernel Bluetooth RFCOMM - Denial of Service

    Linux kernel Bluetooth RFCOMM contains a deadlock vulnerability caused by socket lock inversion in listener cleanup, letting attackers cause denial of service by triggering a deadlock, exploit requires ability to initiate Bluetooth connections.

  • 8.8 /10 High
    CVE-2026-98283 Auth required

    Linux Kernel KVM PPC Book3S HV - Use After Free

    Linux kernel KVM PPC Book3S HV contains a use-after-free vulnerability caused by improper reference handling in kvmhv_emulate_tlbie_all_lpid(), letting concurrent vCPUs access freed memory, exploit requires concurrent nested guest vCPU execution.