Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
11502
Critical
2091
CISA KEV
92
Public PoC
393

Most common types

  • Broken Access Control 1499
  • Remote Code Execution 1456
  • Privilege Escalation 1227
  • Authentication Bypass 940
  • Denial of Service 799

Published per day, last 14 days

8 Oct Critical Other 21 Oct

Source: public CVE records (NVD, CISA KEV) · last published 21 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 388 of 767

  • 9.1 /10 Critical
    CVE-2026-51859 No auth

    Bisheng - Path Traversal

    Bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 contain a path traversal caused by improper validation in save_download_file function, letting attackers access arbitrary files, exploit requires crafted input.

  • 9.8 /10 Critical
    CVE-2026-51858 No auth

    camel-ai camel - Command Injection

    camel-ai camel 0.2.91a1, v0.2.91a2, and v0.2.91a3 contain a command injection caused by TerminalToolkit.shell_exec allowing prompt-driven shell command execution without an approval boundary, letting attackers execute arbitrary commands remotely, exploit requires no special privileges.

  • 9.8 /10 Critical
    CVE-2026-51857 No auth

    camel-ai camel - Remote Code Execution

    camel-ai camel 0.2.91a1, v0.2.91a2, and v0.2.91a3 contain a remote code execution caused by running model-produced Python code through SubprocessInterpreter without an approval boundary, letting attackers execute arbitrary code remotely, exploit requires no special privileges.

  • 9.8 /10 Critical
    CVE-2026-51856

    agentscope - Remote Code Execution

    agentscope 1.0.18, 1.0.19 contains a remote code execution caused by unprotected execute_python_code tool exposure in RealtimeAgent session, letting remote WebSocket users execute arbitrary Python code, exploit requires WebSocket access.

  • 7.5 /10 High
    CVE-2026-51853 No auth

    agent-zero - Path Traversal

    agent-zero 1.7, 1.8, 1.9, and 1.10 contain a path traversal caused by FileBrowser class initializing with host root directory as workspace in python/helpers/file_browser.py, letting attackers access any file on the system without restriction, exploit requires no special privileges.

  • 7.5 /10 High
    CVE-2026-51852 No auth

    agent-zero - Path Traversal

    agent-zero 1.7, 1.8, 1.9, and 1.10 contain a path traversal caused by lack of normalization or validation of user-controlled file paths in python/helpers/file_browser.py:FileBrowser.save_file_b64, letting attackers access arbitrary files, exploit requires crafted file path input.

  • 8.1 /10 High
    CVE-2026-51570 Auth required

    modelscope Agentscope - Path Traversal

    modelscope Agentscope v1.0.0-v1.0.8 contains a path traversal caused by improper handling in insert_text_file, letting attackers access arbitrary files, exploit requires no special privileges.

  • 8.1 /10 High
    CVE-2026-51568 Auth required

    modelscope Agentscope - Path Traversal

    modelscope Agentscope v1.0.18-v1.0.0 contains a path traversal caused by improper handling in write_text_file, letting attackers access or modify arbitrary files, exploit requires no special privileges.

  • 7.1 /10 High
    CVE-2026-47602 Auth required

    NVIDIA GPU Display Driver - Denial of Service & Information Disclosure

    NVIDIA GPU Display Driver for Windows and Linux contains a denial of service and information disclosure vulnerability caused by dereferencing an untrusted pointer in the kernel mode driver, letting local users cause system crashes and leak information, exploit requires local user access.

  • 7.8 /10 High
    CVE-2026-47601 Auth required

    NVIDIA GPU Display Driver - Privilege Escalation

    NVIDIA GPU Display Driver for Windows and Linux contains a privilege escalation caused by improper preservation of memory access permissions in the DMA-BUF import path, letting unprivileged local users escalate privileges and execute code.

  • 7.8 /10 High
    CVE-2026-47600

    NVIDIA GPU Display Driver - Code Execution & Privilege Escalation & DoS & Information Disclosure & Data Tampering

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer caused by an error-handling path operating on an uninitialized resource, letting attackers execute code, escalate privileges, cause DoS, disclose information, and tamper data, exploit requires local access.

  • 7.8 /10 High
    CVE-2026-47599 Auth required

    NVIDIA GPU Display Driver for Linux - Code Execution & Privilege Escalation & DoS & Information Disclosure & Data Tampering

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module caused by improper preservation of memory access permissions during DMA mapping, letting unprivileged local users execute code, escalate privileges, cause denial of service, disclose information, and tamper data, exploit requires local unprivileged access.

  • 7.0 /10 High
    CVE-2026-47598 Auth required

    NVIDIA GPU Display Driver for Linux - Use After Free

    NVIDIA GPU Display Driver for Linux contains a use-after-free vulnerability in the open-source kernel module event delivery path, letting unprivileged local users cause code execution, privilege escalation, denial of service, information disclosure, and data tampering, exploit requires local unprivileged user access.

  • 7.8 /10 High
    CVE-2026-47597 Auth required

    NVIDIA GPU Display Driver - Use After Free

    NVIDIA GPU Display Driver for Windows and Linux contains a use-after-free vulnerability caused by a missing self-reference guard in the open-source kernel module Resource Server's map cleanup path, letting unprivileged local users execute code, escalate privileges, cause denial of service, disclose information, and tamper data, exploit requires local unprivileged user access.

  • 7.0 /10 High
    CVE-2026-47596 Auth required

    NVIDIA GPU Display Driver for Linux - Privilege Escalation

    NVIDIA GPU Display Driver for Linux contains a privilege escalation vulnerability caused by improper preservation of memory permissions in the kernel mode layer, letting unprivileged users write to read-only memory and escalate privileges.