Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 32 of 891

  • 7.5 /10 High
    CVE-2026-116401 No auth

    HUSKY - Broken Access Control

    HUSKY <= 1.4.6 contains a broken access control vulnerability caused by improper authorization checks, letting unauthenticated attackers access restricted resources, exploit requires no authentication.

  • 9.8 /10 Critical
    CVE-2026-116386 No auth

    SMS Alert Order Notifications - Privilege Escalation

    SMS Alert Order Notifications <= 4.0.2 contains a privilege escalation vulnerability caused by improper access control, letting unauthenticated attackers escalate privileges, exploit requires no authentication.

  • 9.5 /10 Critical
    CVE-2026-116366 PoC publicNo auth

    ClickHouse Server - Remote Code Execution

    ClickHouse Server contains a remote code execution vulnerability caused by improper access control, letting unauthenticated users with network access execute arbitrary code remotely, exploit requires network access.

  • 8.4 /10 High
    CVE-2026-116249 Auth required

    pgAdmin 4 - Path Traversal & Injection

    pgAdmin 4 < 9.19 contains a path traversal and parameter injection vulnerability caused by improper path resolution and insufficient connection parameter validation, letting attackers access or manipulate other users' files and inject connection parameters, exploit requires crafted server configuration input.

  • 8.2 /10 High
    CVE-2026-116247 Auth required

    pgAdmin 4 - Authentication Bypass

    pgAdmin 4 < 9.19 contains a broken authentication caused by missing or inaccessible password and client certificate files in server mode, letting any user connect using the service account's credentials, exploit requires server mode without configured credentials.

  • 8.2 /10 High
    CVE-2026-116245 Auth required

    pgAdmin 4 - Authentication Bypass

    pgAdmin 4 < 9.19 contains a broken authentication caused by unrestricted use of service connection parameters in server mode, letting any user connect with credentials from service files, exploit requires server mode operation with default settings.

  • 8.2 /10 High
    CVE-2026-116244 PoC public

    pgAdmin 4 - Authentication Bypass

    pgAdmin 4 < 9.19 contains a broken authentication caused by improper handling of Kerberos delegated credentials in connection environment, letting attackers connect as the service account's Kerberos principal, exploit requires server mode or Windows SSPI usage.

  • 7.5 /10 High
    CVE-2026-116243 Auth required

    pgAdmin 4 - Command Injection

    pgAdmin 4 < 9.19 contains a command injection caused by improper validation of user-set binary paths allowing execution of arbitrary binaries from shared storage, letting authenticated users execute OS commands, exploit requires user to set binary path to malicious executable.

  • 8.2 /10 High
    CVE-2026-116242 Auth required

    pgAdmin 4 - Authentication Bypass

    pgAdmin 4 < 9.19 contains an authentication bypass caused by SSH tunnel configuration in server mode using the service account's SSH keys and agent, letting any user create tunnels without their own credentials, exploit requires server mode usage.

  • 9.9 /10 Critical
    CVE-2026-116241 Auth required

    pgAdmin 4 - Command Injection

    pgAdmin 4 < 9.19 contains a command injection caused by improper handling of backslashes inside double-quoted identifiers in the Import/Export Data tool, letting ordinary database roles execute OS commands, exploit requires the ability to turn off standard_conforming_strings.

  • 8.5 /10 High
    CVE-2026-116239 Auth required

    pgAdmin 4 - Authentication Bypass

    pgAdmin 4 < 9.19 contains an authentication bypass caused by improper account source verification after LDAP or Kerberos authentication, letting attackers log in as another account with matching username, exploit requires valid LDAP or Kerberos credentials.

  • 8.1 /10 High
    CVE-2026-116238 No auth

    pgAdmin 4 - Authentication Bypass

    pgAdmin 4 < 9.19 contains an authentication bypass caused by improper handling of internal account lockout and password verification in Flask-Security views, letting unauthenticated attackers perform unlimited password guesses on internal accounts, exploit requires server mode with default configuration.

  • 8.7 /10 High
    CVE-2026-115830

    Secret Server - Authentication Bypass

    Secret Server < 12.3.1 contains a broken authentication caused by acceptance of unsigned JWT tokens, letting attackers gain cloudadmin permissions, exploit requires specific conditions to submit unsigned JWT.

  • 8.7 /10 High
    CVE-2026-115829 Auth required

    Secret Server - Authentication Bypass

    Secret Server < 12.3.1 contains an authentication bypass caused by improper multi-factor authentication logic, letting attackers bypass initial login by completing only the second factor, exploit requires multi-factor authentication enabled.

  • 8.3 /10 High
    CVE-2026-115642 Auth required

    OpenStack keystonemiddleware - Broken Access Control

    OpenStack keystonemiddleware < 13.0.2 contains a broken access control vulnerability caused by improper validation of custom X-Service-Token header, letting attackers with application credentials bypass restrictions and escalate privileges.