Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10425
Critical
1916
CISA KEV
79
Public PoC
384

Most common types

  • Broken Access Control 1290
  • Privilege Escalation 1190
  • Remote Code Execution 1111
  • Authentication Bypass 835
  • Denial of Service 799

Published per day, last 14 days

7 Oct Critical Other 20 Oct

Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 417 of 695

  • 7.5 /10 High
    CVE-2026-80150 No auth

    Lantronix SLC8000 & EMG8500/EMG7500 & SLB882 - Server-Side Request Forgery

    Lantronix SLC8000 < 9.7.0.3, EMG8500/EMG7500 < 9.7.0.1, and all SLB882 firmware versions contain a server-side request forgery caused by manipulation of the rooturl parameter in WebSSH/WebTelnet listener, letting unauthenticated attackers redirect Telnet connections to attacker-controlled hosts, exploit requires no authentication.

  • 8.6 /10 High
    CVE-2026-80149 No auth

    Lantronix SLC8000 & EMG8500/EMG7500 & SLB882 - Server-Side Request Forgery

    Lantronix SLC8000 < 9.7.0.3, EMG8500/EMG7500 < 9.7.0.1, and all SLB882 firmware versions contain a server-side request forgery caused by manipulation of the rooturl parameter in WebSSH/WebTelnet listener, letting unauthenticated attackers make SSH connections to attacker-controlled endpoints, exploit requires no authentication.

  • 8.6 /10 High
    CVE-2026-80148 No auth

    Lantronix SLC8000 - Server Side Request Forgery

    Lantronix SLC8000 < 9.7.0.3, EMG8500/EMG7500 < 9.7.0.1, and all SLB882 firmware versions contain a server-side request forgery caused by improper input handling in WebSSH/WebTelnet listener, letting unauthenticated attackers redirect SSH connections to attacker-controlled hosts, exploit requires sending crafted overlong username strings.

  • 9.9 /10 Critical
    CVE-2026-80147 Auth required

    Lantronix SLC8000 - Buffer Overflow

    Lantronix SLC8000 < 9.7.0.2, EMG8500/EMG7500 < 9.7.0.1, and all versions of SLB882/SLCx-03/SLCx-02 contain a stack-based buffer overflow caused by an undocumented mfc eeprom write command copying unbounded input into a stack buffer, letting authenticated attackers execute arbitrary code via terminal or CLI interface.

  • 9.9 /10 Critical
    CVE-2026-80146 Auth required

    Lantronix SLC8000 - Remote Code Execution

    Lantronix SLC8000 < 9.7.0.2, EMG8500/EMG7500 < 9.7.0.1, and all versions of SLB882/SLCx-03/SLCx-02 contain a stack-based buffer overflow caused by an undocumented mfc eeprom read command copying unbounded input to a stack buffer, letting authenticated attackers execute arbitrary code via system() call.

  • 9.1 /10 Critical
    CVE-2026-80145 Auth required

    Lantronix SLC8000 - Command Injection

    Lantronix SLC8000 < 9.7.0.2, EMG8500/EMG7500 < 9.7.0.1, and all versions of SLB882/SLCx-03/SLCx-02 contain a command injection caused by unsanitized input in the set cifs password command, letting authenticated attackers with services permission execute arbitrary shell commands as root.

  • 9.9 /10 Critical
    CVE-2026-80144 Auth required

    Lantronix SLC8000 - Command Injection

    Lantronix SLC8000 < 9.7.0.2, EMG8500/EMG7500 < 9.7.0.1, and all versions of SLB882/SLCx-03/SLCx-02 contain a command injection caused by unsanitized input in an undocumented mfc eeprom write command, letting authenticated attackers execute arbitrary shell commands as root, exploit requires authentication.

  • 9.9 /10 Critical
    CVE-2026-80143 Auth required

    Lantronix SLC8000 & EMG8500/EMG7500 - Command Injection

    Lantronix SLC8000 < 9.7.0.2, EMG8500/EMG7500 < 9.7.0.1, and all versions of SLB882/SLCx-03/SLCx-02 contain a command injection caused by unsanitized input in an undocumented mfc eeprom read command, letting authenticated attackers execute arbitrary shell commands as root, exploit requires authentication.

  • 7.8 /10 High
    CVE-2026-79906 No auth

    Substance3D Modeler - Remote Code Execution

    Substance3D - Modeler contains an out-of-bounds write vulnerability caused by improper memory handling, letting attackers execute arbitrary code as the current user, exploit requires victim to open a malicious file.

  • 8.8 /10 High
    CVE-2026-79314 Auth required

    x-ui - Privilege Escalation

    x-ui 0.3.2 contains a horizontal privilege escalation caused by lack of ownership verification in inbound proxy configuration update path, letting authenticated users modify other users' proxy settings, exploit requires authentication.

  • 9.8 /10 Critical
    CVE-2026-79313 No auth

    webpy web.py - Authentication Bypass

    webpy web.py 0.76 contains an insufficient session expiration vulnerability caused by reliance on periodic cleanup instead of last-access time checks, letting attackers replay expired sessions to access protected resources.

  • 9.8 /10 Critical
    CVE-2026-77987

    GitHub Enterprise Server - Server-Side Request Forgery

    GitHub Enterprise Server 3.17 through 3.22 contains a server-side request forgery caused by improper port validation in the notebook viewer, letting attackers extract instance secrets and achieve remote code execution, exploit requires network access and authentication depending on private mode.

  • 7.1 /10 High
    CVE-2026-77633 Auth required

    Cloudreve - Denial of Service

    Cloudreve < 4.18.0 contains a denial of service caused by race condition in storage quota enforcement in PrepareUpload, letting authenticated users with Files.Write permission exhaust host storage, exploit requires concurrent upload requests.

  • 7.8 /10 High
    CVE-2026-77605 No auth

    Notepad++ - Command Injection

    Notepad++ < 8.9.8 contains a command injection caused by improper resolution of sibling files in Folder as Workspace Run by system action, letting attackers execute arbitrary scripts as the current user, exploit requires user to invoke Run by system on a crafted file.

  • 7.5 /10 High
    CVE-2026-77558 No auth

    UniFi Gateway - Denial of Service

    UniFi gateway devices contain an out-of-bounds read vulnerability that allows a network attacker to cause denial of service by crashing the device, exploit requires network access.