Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10425
Critical
1916
CISA KEV
79
Public PoC
384

Most common types

  • Broken Access Control 1290
  • Privilege Escalation 1190
  • Remote Code Execution 1111
  • Authentication Bypass 835
  • Denial of Service 799

Published per day, last 14 days

7 Oct Critical Other 20 Oct

Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 402 of 695

  • 7.8 /10 High
    CVE-2026-91802 No auth

    Foxit PDF Editor/Reader - Denial of Service

    Foxit PDF Editor/Reader contains a heap-based out-of-bounds write vulnerability caused by improper handling of bitmap stride and target buffer formats in WebP image decoding, letting attackers cause application crash, exploit requires crafted WebP image.

  • 7.8 /10 High
    CVE-2026-91801 No auth

    Foxit PDF Editor/Reader - Path Traversal

    Foxit PDF Editor/Reader contains a path traversal caused by insufficient validation of embedded PDF resource file paths, letting attackers write files outside intended locations, potentially enabling arbitrary code execution, exploit requires crafted PDF file.

  • 8.8 /10 High
    CVE-2026-91800 Auth required

    Foxit PDF Editor - Privilege Escalation

    Foxit PDF Editor for macOS contains a local privilege escalation caused by insufficient validation of a user-modifiable configuration value during high-privilege upgrades, letting local attackers execute arbitrary commands with root privileges.

  • 7.8 /10 High
    CVE-2026-91799 No auth

    Foxit PDF Editor/Reader - Use After Free

    Foxit PDF Editor/Reader contains a use-after-free vulnerability caused by improper handling of JavaScript array objects, letting attackers cause crashes or execute arbitrary code via crafted PDFs, exploit requires opening malicious PDF.

  • 8.8 /10 High
    CVE-2026-91798 Auth required

    Foxit PDF Editor/Reader - Privilege Escalation

    Foxit PDF Editor/Reader contains a local privilege escalation caused by insecure permission configuration in the update daemon, letting local attackers execute arbitrary scripts with higher privileges, exploit requires local access.

  • 7.8 /10 High
    CVE-2026-91797 No auth

    Foxit PDF Editor/Reader - Path Traversal

    Foxit PDF Editor/Reader contains a path traversal vulnerability caused by improper validation of attachment file names, letting attackers write malicious attachments outside the secure directory when the PDF is opened, exploit requires user to open the PDF.

  • 7.8 /10 High
    CVE-2026-91795 No auth

    Foxit PDF Editor/Reader - Remote Code Execution

    Foxit PDF Editor/Reader contains a buffer overflow caused by inadequate validation of encryption metadata in FileOpen plugin, letting attackers execute arbitrary code via specially crafted PDF files, exploit requires crafted PDF file.

  • 7.8 /10 High
    CVE-2026-91794 No auth

    Foxit PDF Editor/Reader - Out-of-Bounds Write

    Foxit PDF Editor/Reader contains an out-of-bounds write vulnerability caused by insufficient boundary validation in the PDF rendering process when handling malformed color space data, letting remote attackers cause crashes and potentially execute code.

  • 7.8 /10 High
    CVE-2026-91793 No auth

    Foxit PDF Editor/Reader - Denial of Service

    Foxit PDF Editor/Reader contains a use-after-free vulnerability caused by executing scripts that modify annotation rich-text attributes with malformed font data, letting attackers cause application crashes, exploit requires opening a crafted PDF.

  • 7.8 /10 High
    CVE-2026-91792 No auth

    Foxit PDF Editor/Reader - Denial of Service

    Foxit PDF Editor/Reader contains a use-after-free caused by reentrant zoom and layout operations triggered by page- and annotation-related JavaScript actions, letting attackers cause application crashes, exploit requires crafted PDF.

  • 7.8 /10 High
    CVE-2026-91791 No auth

    Foxit PDF Editor/Reader - Denial of Service

    Foxit PDF Editor/Reader contains a use-after-free vulnerability caused by reentrant JavaScript execution triggered by page-visibility events, letting attackers cause application crash via invalid memory read, exploit requires crafted PDF file.

  • 7.8 /10 High
    CVE-2026-91790 No auth

    Foxit PDF Editor/Reader - Use After Free

    Foxit PDF Editor/Reader contains a use after free caused by improper validation of malformed optional content attributes in image objects, letting attackers trigger a crash, exploit requires crafted PDF file.

  • 7.8 /10 High
    CVE-2026-91789 No auth

    Foxit PDF Editor/Reader - Remote Code Execution

    Foxit PDF Editor/Reader contains a buffer overflow caused by insufficient validation of image dimensions in U3D/GIF texture decoding, letting remote attackers execute code via crafted images, exploit requires crafted PDF files.

  • 7.5 /10 High
    CVE-2026-91777

    FasterXML jackson-databind - Denial of Service

    FasterXML jackson-databind contains a performance issue caused by linear scanning of pending-reference accumulator in identity-enabled collections or maps, letting attackers cause quadratic CPU usage during deserialization, exploit requires deserialization of attacker-controlled JSON.

  • 7.5 /10 High
    CVE-2026-91776

    FasterXML jackson-databind - Denial of Service

    FasterXML jackson-databind contains a memory retention vulnerability caused by caching fallback deserializers for unrecognized type IDs in name-based polymorphism with defaultImpl, letting attackers cause memory exhaustion, exploit requires attacker-controlled type IDs and long-lived ObjectMapper.