Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10425
Critical
1916
CISA KEV
79
Public PoC
384

Most common types

  • Broken Access Control 1290
  • Privilege Escalation 1190
  • Remote Code Execution 1111
  • Authentication Bypass 835
  • Denial of Service 799

Published per day, last 14 days

7 Oct Critical Other 20 Oct

Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 408 of 695

  • 9.1 /10 Critical
    CVE-2026-75884 Auth required

    AWX - Broken Access Control

    AWX contains a broken access control caused by incomplete blocklist in container group pod_spec_override field, letting AAP platform administrators escalate privileges to OpenShift namespace-level access and exfiltrate secrets, exploit requires AAP platform administrator privileges.

  • 8.8 /10 High
    CVE-2026-75825

    ZohoCorp ManageEngine OpManager - Authentication Bypass

    ZohoCorp ManageEngine OpManager <= 12.8.710 with Application Manager Plugin enabled contains an authentication bypass vulnerability, letting attackers bypass authentication, exploit requires Application Manager Plugin enabled.

  • 9.0 /10 Critical
    CVE-2026-75799 No auth

    YAHMAN Add-ons WordPress plugin - Unrestricted File Upload

    YAHMAN Add-ons WordPress plugin < 0.9.31 contains an unrestricted file upload vulnerability caused by lack of validation on remote files cached in a public directory, letting unauthenticated attackers upload arbitrary PHP files and achieve remote code execution when the feature is enabled.

  • 7.8 /10 High
    CVE-2026-75131 Auth required

    NetworkManager-l2tp - Privilege Escalation

    NetworkManager-l2tp <= 1.52.4 contains a privilege escalation caused by injection of pppd options via crafted VPN username, letting local users with VPN creation permission execute arbitrary code as root, exploit requires local VPN creation permission.

  • 7.5 /10 High
    CVE-2026-73591 No auth

    Dell Secure Connect Gateway (SCG) Policy Manager - Information Disclosure

    Dell Secure Connect Gateway (SCG) Policy Manager < 5.34.00.16 contains an inclusion of sensitive information in source code vulnerability, letting unauthenticated remote attackers expose sensitive information, exploit requires remote access.

  • 7.4 /10 High
    CVE-2026-73588

    Dell Secure Connect Gateway Policy Manager - Authentication Bypass

    Dell Secure Connect Gateway (SCG) Policy Manager < 5.34.00.16 contains a missing authentication for critical function vulnerability, letting unauthenticated remote attackers gain unauthorized access, exploit requires remote access.

  • 8.8 /10 High
    CVE-2026-70125

    CVE-2026-70125

    Microsoft Office Outlook Remote Code Execution Vulnerability

  • 7.8 /10 High
    CVE-2026-6935 Auth required

    IBM Concert - Command Injection

    IBM Concert 1.0.0 through 3.0.0 contains a command injection caused by unqualified executable paths and unrestricted search path resolution, letting local attackers execute malicious code, exploit requires local system access.

  • 9.8 /10 Critical
    CVE-2026-6928

    IBM Concert - Use After Free

    IBM Concert 1.0.0 through 3.0.0 contains a use after free vulnerability caused by accessing memory after it has been freed, letting attackers corrupt memory, cause crashes, or execute arbitrary code, exploit requires attacker to influence program execution or input.

  • 7.8 /10 High
    CVE-2026-6794 Auth required

    IBM Concert - Remote Code Execution

    IBM Concert 1.0.0 through 3.0.0 contains a double free vulnerability caused by incorrect memory management, letting local attackers execute arbitrary code by corrupting heap memory, exploit requires local access.

  • 9.8 /10 Critical
    CVE-2026-6730 No auth

    IBM Concert - Buffer Overflow

    IBM Concert 1.0.0 through 3.0.0 contains a buffer overflow caused by improper bounds checking, letting local users execute arbitrary code on the system, exploit requires local access.

  • 9.8 /10 Critical
    CVE-2026-6721 No auth

    IBM Concert - Command Injection

    IBM Concert 1.0.0 through 3.0.0 contains a command injection caused by incorporation of specially crafted input into OS commands, letting unauthenticated remote attackers execute arbitrary commands, exploit requires no authentication.

  • 7.5 /10 High
    CVE-2026-6668 No auth

    PgBouncer - Denial of Service

    PgBouncer through 1.25.2 contains an integer overflow caused by improper packet buffer growth logic, letting unauthenticated remote attackers cause denial of service by saturating CPU and stalling connections, exploit requires crafted large input.

  • 7.5 /10 High
    CVE-2026-61814 No auth

    Jawn - Denial of Service

    Jawn < 1.7.0 contains a denial of service caused by quadratic processing in AsyncParser when a single JSON token is delivered in many small chunks, letting remote attackers exhaust CPU resources, exploit requires crafted JSON input.

  • 7.5 /10 High
    CVE-2026-61695 No auth

    Wire Swift - Denial of Service

    Wire Swift runtime < 6.4.1 and < 7.0.0-alpha04 contains a denial of service caused by accepting negative length in LENGTH_DELIMITED field inside unknown START_GROUP, letting attackers crash the process remotely without authentication.