Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
11502
Critical
2091
CISA KEV
92
Public PoC
393

Most common types

  • Broken Access Control 1499
  • Remote Code Execution 1456
  • Privilege Escalation 1227
  • Authentication Bypass 940
  • Denial of Service 799

Published per day, last 14 days

8 Oct Critical Other 21 Oct

Source: public CVE records (NVD, CISA KEV) · last published 21 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 342 of 767

  • 9.8 /10 Critical
    CVE-2026-37719 No auth

    dormakaba evolo Service - Remote Code Execution

    dormakaba evolo Service contains a remote code execution caused by a vulnerability in a .NET component, letting remote attackers execute arbitrary code as SYSTEM, exploit requires network access.

  • 7.8 /10 High
    CVE-2026-28648 Auth required

    Settings - Privilege Escalation

    Settings contains a permission bypass caused by a confused deputy issue, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28647 Auth required

    DeviceAdminAppsPreferenceController - Broken Access Control

    DeviceAdminAppsPreferenceController contains a permission bypass caused by a logic error in updateState method, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28641 Auth required

    ApplicationActionButtonsPreferenceController - Broken Access Control

    ApplicationActionButtonsPreferenceController contains a permission bypass caused by a logic error in shouldDisableUninstallButton, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28640 Auth required

    Android CredentialStorageActivity - Broken Access Control

    CredentialStorageActivity in Android contains a permission bypass caused by improper input validation in checkCallerIsCertInstallerOrSelfInProfile, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28625 Auth required

    Affected product - Broken Access Control

    Affected product contains a permission bypass caused by a logic error in multiple locations, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 9.3 /10 Critical
    CVE-2026-21589 CISA KEVPoC publicNo auth

    Atlassian Data Center - Arbitrary File Access

    Atlassian Bitbucket, Confluence, Jira Service Management, Jira Software, Bamboo, Crowd, Crucible, and Fisheye Data Center versions contain an arbitrary file access vulnerability caused by improper access control in the web application root directory, letting unauthenticated attackers access specific files with prior knowledge of exact file names and paths, exploit requires prior knowledge of target file path.

  • 8.8 /10 High
    CVE-2026-20586 No auth

    vdec - Privilege Escalation

    vdec contains an out of bounds write caused by missing bounds check, letting remote attackers escalate privileges, exploit requires user interaction.

  • 8.4 /10 High
    CVE-2026-20531 No auth

    apu - Use After Free

    apu contains a use after free vulnerability caused by improper memory management, letting local attackers escalate privileges without additional execution privileges, exploit requires no user interaction.

  • 7.5 /10 High
    CVE-2026-20526 No auth

    Modem - Privilege Escalation

    Modem contains an out of bounds write caused by missing bounds check, letting remote attackers escalate privileges if a UE connects to a rogue base station, exploit requires user interaction.

  • 8.4 /10 High
    CVE-2026-20524 No auth

    apu - Privilege Escalation

    apu contains a memory corruption caused by improper input validation, letting local attackers escalate privileges without additional execution privileges, exploit requires no user interaction.

  • 8.4 /10 High
    CVE-2026-20523 No auth

    Neuropilot - Privilege Escalation

    Neuropilot contains an out of bounds write caused by a missing bounds check, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 8.4 /10 High
    CVE-2026-20522 No auth

    Neuropilot - Privilege Escalation

    Neuropilot contains an out of bounds write caused by missing bounds check, letting local attackers escalate privileges without additional execution privileges, exploit requires no user interaction.

  • 8.4 /10 High
    CVE-2026-20521 No auth

    Video HAL - Privilege Escalation

    Video HAL contains a privilege escalation caused by a missing bounds check, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.5 /10 High
    CVE-2026-20520 No auth

    Modem - Privilege Escalation

    Modem contains an out of bounds write caused by missing bounds check, letting remote attackers escalate privileges if UE connects to a rogue base station, exploit requires no additional privileges or user interaction.