Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
11502
Critical
2091
CISA KEV
92
Public PoC
393

Most common types

  • Broken Access Control 1499
  • Remote Code Execution 1456
  • Privilege Escalation 1227
  • Authentication Bypass 940
  • Denial of Service 799

Published per day, last 14 days

8 Oct Critical Other 21 Oct

Source: public CVE records (NVD, CISA KEV) · last published 21 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 338 of 767

  • 7.2 /10 High
    CVE-2026-102160 Auth required

    CloudVision CUE - OS Command Injection

    CloudVision CUE contains an OS command injection caused by crafted backup requests in backup management, letting authenticated Super Users execute arbitrary commands with service privileges.

  • 9.8 /10 Critical
    CVE-2026-102159 No auth

    CV-CUE - Broken Access Control

    CV-CUE backend contains an access control flaw allowing unauthenticated network attackers to access internal service functionality, potentially exposing sensitive location information or disrupting services, exploit requires network access.

  • 8.5 /10 High
    CVE-2026-102155 Auth required

    Spectralight WiFi-server - XML External Entity Injection

    Spectralight WiFi-server contains an XML External Entity (XXE) injection caused by improper XML input handling, letting authenticated users disclose local files and cause partial denial of service.

  • 7.8 /10 High
    CVE-2026-101258 No auth

    Ghostscript - Command Injection

    Ghostscript contains a command injection caused by memory corruption and disabling of internal path access controls during rendering of crafted PostScript or EPS documents, letting attackers execute arbitrary shell commands, exploit requires crafted document delivery.

  • 8.8 /10 High
    CVE-2026-101207 Auth required

    Dell OpenManage Integration with Microsoft Windows Admin Center - OS Command Injection

    Dell OpenManage Integration with Microsoft Windows Admin Center < 3.7.0 contains an OS command injection caused by improper neutralization of special elements, letting low privileged remote attackers execute arbitrary commands, exploit requires remote access.

  • 8.4 /10 High
    CVE-2026-101158 Auth required

    Fileserver - Stored XSS

    Fileserver upload API contains a stored XSS vulnerability caused by missing input validation, letting authenticated attackers with file upload privileges hijack user sessions and gain administrative access, exploit requires authentication with upload privileges.

  • 8.7 /10 High
    CVE-2026-101157 No auth

    Unknown Product - Stored XSS

    An unspecified product contains a stored XSS vulnerability caused by improper sanitization of user input, letting unauthenticated attackers with adjacent-network access inject malicious content that executes when authenticated users view it.

  • 8.4 /10 High
    CVE-2026-101156 Auth required

    Unknown Product - Stored XSS

    An unspecified product contains a stored XSS caused by improper sanitization of configuration input, letting authenticated high-privilege administrators execute scripts in other authenticated users' browsers, exploit requires high-privilege admin access.

  • 9.1 /10 Critical
    CVE-2026-101155 Auth required

    Software Management Studio - Broken Access Control

    Software Management Studio contains a broken access control vulnerability caused by improper validation of file operations in the Software Repository, letting authenticated attackers with specific permissions read or write files beyond intended scope, exploit requires specific permissions.

  • 7.2 /10 High
    CVE-2026-101154 Auth required

    Platform - Broken Access Control

    The platform contains a file read and write vulnerability caused by specially crafted requests or file uploads to the Network Provisioning Image Repository, letting authenticated remote attackers with specific permissions access or modify files beyond intended scope.

  • 8.0 /10 High
    CVE-2026-101153 Auth required

    CloudVision Portal & Sensor - Path Traversal

    CloudVision Portal (on-premises) and CloudVision Sensor contain a path traversal caused by insufficient validation, letting authenticated users with high privileges extract unintended data from the Sensor.

  • 8.0 /10 High
    CVE-2026-101152 No auth

    CloudVision - Authentication Bypass

    CloudVision contains a broken authentication caused by insufficient validation in the Single Sign-On (SSO) login flow, letting remote unauthenticated attackers redirect authentication material to attacker-controlled URLs, exploit requires user interaction.

  • 7.7 /10 High
    CVE-2026-101027 Auth required

    Gitea - Server Side Request Forgery

    Gitea contains a server-side request forgery caused by insufficient validation of resolved addresses for allowed hostnames in migrations, letting attackers bypass local network restrictions and access internal services, exploit requires control over DNS of allowed hostname.

  • 9.1 /10 Critical
    CVE-2026-101023 No auth

    Gitea - Authentication Bypass

    Gitea contains an OAuth2 token endpoint vulnerability caused by improper validation of token type in refresh_token grant, letting attackers with access tokens extend access beyond original lifetime, exploit requires valid access token.

  • 9.8 /10 Critical
    CVE-2025-71383 No auth

    Dbit WIFI4 N300 - Denial of Service

    Dbit WIFI4 N300 1.0.0 contains a denial of service caused by an error in JSON parser when a request from local Wi-Fi network lacks /api/login username or password field, letting local attackers crash the management interface.