Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
11502
Critical
2091
CISA KEV
92
Public PoC
393

Most common types

  • Broken Access Control 1499
  • Remote Code Execution 1456
  • Privilege Escalation 1227
  • Authentication Bypass 940
  • Denial of Service 799

Published per day, last 14 days

8 Oct Critical Other 21 Oct

Source: public CVE records (NVD, CISA KEV) · last published 21 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 309 of 767

  • 8.8 /10 High
    CVE-2026-98282 Auth required

    Linux Kernel - Integer Overflow

    Linux kernel contains an integer overflow vulnerability in powerpc/iommu due to improper validation of npages in iommu_tce_check_ioba, letting attackers cause potential memory corruption, exploit requires crafted input with npages > 1.

  • 7.8 /10 High
    CVE-2026-98281 Auth required

    Linux Kernel - Race Condition

    Linux kernel contains a race condition in futex handling caused by missing private hash allocation on vfork(), letting attackers cause inconsistent futex state, exploit requires use of vfork() or CLONE_VM.

  • 7.8 /10 High
    CVE-2026-98276

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability caused by improper locking of sk_flags in sock_gettstamp(), letting attackers cause kernel memory corruption via race conditions, exploit requires concurrent socket operations.

  • 8.1 /10 High
    CVE-2026-98261 No auth

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in cifs_chan_skip_or_disable() caused by improper handling of server and channel references, letting attackers cause memory corruption or denial of service, exploit requires crafted network interaction.

  • 7.8 /10 High
    CVE-2026-98260 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability caused by delayed cleanup of POSIX timers after de_thread() during exec, letting attackers cause kernel memory corruption, exploit requires triggering execve failure in non-leader threads.

  • 7.8 /10 High
    CVE-2026-98258 Auth required

    Linux Kernel - Use-After-Free

    Linux kernel contains a use-after-free vulnerability in POSIX CPU timers caused by improper handling of timer firing state during expiry list operations, letting attackers cause memory corruption, exploit requires triggering timer expiry and deletion race conditions.

  • 7.5 /10 High
    CVE-2026-98257 No auth

    Linux Kernel - Denial of Service

    Linux kernel contains a deadlock vulnerability in rds_ib_cm_connect_complete() caused by improper use of rds_conn_destroy() on protocol version mismatch, letting attackers cause a denial of service by stalling RDS connection workqueues, exploit requires triggering a protocol version mismatch.

  • 7.8 /10 High
    CVE-2026-98256 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in signal handling caused by race conditions during exec() in __send_signal_locked, letting attackers cause kernel memory corruption, exploit requires triggering non-leader execve with posix timer signals.

  • 7.8 /10 High
    CVE-2026-98254 Auth required

    Linux Kernel - Data Corruption

    Linux kernel contains a data corruption vulnerability caused by incorrect address adjustment in swiotlb_bounce() during highmem page lookup, letting attackers cause stale or incorrect DMA data, exploit requires crafted DMA operations.

  • 7.8 /10 High
    CVE-2026-98253 Auth required

    Linux Kernel RDMA/ucma - Use After Free

    Linux kernel RDMA/ucma contains a race condition caused by improper mutex handling in rdma_join_multicast and rdma_leave_multicast functions, letting concurrent join and leave calls cause use-after-free, exploit requires concurrent multicast join calls.

  • 7.0 /10 High
    CVE-2026-98252

    Linux Kernel - Race Condition

    Linux kernel contains a reference count bug in iwpm_get_nlmsg_request() caused by improper initialization order of refcount and list_add_tail(), letting concurrent CPUs cause refcount addition on zero, exploit requires concurrent access to global list.

  • 7.8 /10 High
    CVE-2026-98251

    Linux Kernel openvswitch - Use After Free

    Linux kernel openvswitch contains a use-after-free vulnerability caused by reallocating confirmed conntrack labels in ovs_ct_get_conn_labels(), letting concurrent CPU access cause memory corruption, exploit requires concurrent access to conntrack entries.

  • 7.1 /10 High
    CVE-2026-98243 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use after free vulnerability caused by improper checking of signaling bit and ops pointer in dma-buf/dma-fence, letting attackers potentially cause memory corruption, exploit requires kernel-level access.

  • 7.8 /10 High
    CVE-2026-98241 Auth required

    Linux Kernel - Out of Bounds Read

    Linux kernel contains a memory misinterpretation vulnerability in IPv6 xfrm local error paths caused by dereferencing skb->sk as a full socket when it may be a mini-socket, letting attackers cause out-of-bounds read, exploit requires triggering specific IPv6 XFRM tunnel routes with lower MTU.

  • 8.1 /10 High
    CVE-2026-98239 No auth

    Linux kernel lan743x - Use After Free

    Linux kernel net: lan743x contains a use-after-free vulnerability caused by improper handling of RX checksum in lan743x_rx_process_buffer, letting attackers cause memory corruption, exploit requires multi-buffer packet reception.