Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 11502
- Critical
- 2091
- CISA KEV
- 92
- Public PoC
- 393
Most common types
- Broken Access Control 1499
- Remote Code Execution 1456
- Privilege Escalation 1227
- Authentication Bypass 940
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 21 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 343 of 767
- 7.5 /10 HighCVE-2026-20519 No auth
Modem - Privilege Escalation
Modem contains an out of bounds write caused by missing bounds check, letting remote attackers escalate privileges if UE connects to a rogue base station, exploit requires no additional privileges or user interaction.
- 7.8 /10 HighCVE-2026-19185 Auth required
Zephyr OS - Broken Access Control
Zephyr OS with CONFIG_USERSPACE enabled contains a kernel memory disclosure and write vulnerability caused by improper validation of per-target data buffers in i3c_do_ccc() syscall, letting unprivileged user threads escalate to supervisor privileges by crafting malicious CCC payloads, exploit requires user-mode access to I3C controller device.
- 8.4 /10 HighCVE-2026-19184 Auth required
Zephyr ADC - Buffer Overflow
NXP GAU ADC driver in Zephyr with CONFIG_USERSPACE=y contains a buffer overflow caused by improper validation of buffer_size against active channels, letting user-mode attackers with ADC device access cause kernel memory corruption or privilege escalation, exploit requires user-mode access to ADC device.
- 7.8 /10 HighCVE-2026-12171 No auth
auto-changelog - Remote Code Execution
auto-changelog before 2.6.1 contains a remote code execution caused by loading and executing untrusted configuration and modules from attacker-controlled repositories, letting attackers execute arbitrary code with user or CI privileges, exploit requires running auto-changelog on untrusted repository content.
- 7.0 /10 HighCVE-2026-105773 Auth required
Canimaan Software ClamXAV - Privilege Escalation
Canimaan Software ClamXAV 3.3 - 3.11 contains a local privilege escalation caused by a race condition and insufficient file validation in the Privileged Helper Tool, letting local attackers execute arbitrary code with system privileges, exploit requires local access.
- 7.1 /10 HighCVE-2026-105761 Auth required
Dify - Broken Access Control
Dify < 1.16.0 contains a broken access control vulnerability caused by lack of ownership verification in AppMCPServerController.put() for MCP server updates, letting authenticated workspace members modify other applications' MCP servers, exploit requires authentication as workspace member.
- 7.5 /10 HighCVE-2026-105744 PoC publicNo auth
Docling - Command Injection
Docling 2.94.0 to 2.132.0 contains a file read and write vulnerability caused by unrestricted TeX primitives in the Tectonic LaTeX engine, letting attackers read and overwrite files or execute shell commands, exploit requires enabling tikz_engine="tectonic" option.
- 7.1 /10 HighCVE-2026-105741 Auth required
Langflow - Misconfiguration
Langflow 1.5.0 to 1.10.3 contains an IP spoofing vulnerability caused by improper validation of X-Forwarded-For header in MCP configuration installation endpoint, letting authenticated attackers bypass local-only restriction and overwrite configuration files.
- 9.9 /10 CriticalCVE-2026-105740 CISA KEVAuth required
Langflow - Remote Code Execution
Langflow < 1.9.0 contains a remote code execution caused by unsanitized command injection in MCP server with "Stdio" transport, letting authenticated users execute arbitrary commands on the server, exploit requires user authentication.
- 7.1 /10 HighCVE-2026-105699 Auth required
Langflow - Broken Access Control
Langflow 1.6.8 to 1.9.1 contains a broken access control vulnerability caused by lack of authorization checks on resource URIs in project-scoped MCP connections, letting authenticated users access other users' private flow files, exploit requires authenticated access to any project-scoped MCP endpoint.
- 9.9 /10 CriticalCVE-2026-105697
Langflow - Command Injection
Langflow < 1.10.3 contains a command injection caused by unsanitized user input in MCP server configuration commands, letting attackers execute arbitrary OS commands as the Langflow process user, exploit requires access to MCP server settings or MCP Tools component.
- 9.9 /10 CriticalCVE-2026-105691 Auth required
Penpot - Command Injection
Penpot < 2.18.0 contains a command injection caused by unsanitized fill-color value in SVG exporter executed via child_process.exec, letting attackers with file edit or public share link execute arbitrary commands, exploit requires file edit or access to malicious public share link.
- 7.3 /10 HighCVE-2026-105679 Auth required
Ghost - Stored XSS
Ghost 6.22.1 to 6.64.0 contains a stored XSS caused by improper content type restriction on uploaded files in the default local storage adapter, letting staff users host scripts that may compromise other admin sessions, exploit requires staff user privileges.
- 7.2 /10 HighCVE-2026-105677 Auth required
Ghost - Remote Code Execution
Ghost 6.10.3 to 6.64.0 contains a remote code execution caused by improper loading of theme translation files, letting authenticated administrators execute arbitrary code on the server via crafted themes.
- 7.5 /10 HighCVE-2026-105675 Auth required
Ghost - Broken Access Control
Ghost 4.39.0 to 6.64.0 contains a broken access control caused by staff users with view staff invites permission discovering secret tokens of pending invites, letting staff users escalate privileges by accepting invites, exploit requires staff user permission.