Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10425
Critical
1916
CISA KEV
79
Public PoC
384

Most common types

  • Broken Access Control 1290
  • Privilege Escalation 1190
  • Remote Code Execution 1111
  • Authentication Bypass 835
  • Denial of Service 799

Published per day, last 14 days

7 Oct Critical Other 20 Oct

Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 424 of 695

  • 7.4 /10 High
    CVE-2026-18172 No auth

    IBM Financial Transaction Manager (FTM) - XML External Entity Injection

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift contains an XML external entity injection caused by improper restriction of XML external entity references, letting remote attackers obtain sensitive information, exploit requires crafted XML input.

  • 9.9 /10 Critical
    CVE-2026-18169 Auth required

    IBM Financial Transaction Manager - Information Disclosure

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift contains an information disclosure vulnerability caused by improper validation of symbolic links, letting remote authenticated attackers obtain sensitive information.

  • 9.8 /10 Critical
    CVE-2026-18163 No auth

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift - Insecure Deserialization

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift contains an insecure deserialization vulnerability caused by improper deserialization of untrusted data, letting remote attackers execute arbitrary code, exploit requires crafted malicious input.

  • 9.8 /10 Critical
    CVE-2026-18162 No auth

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift - Remote Code Execution

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift contains a remote code execution vulnerability caused by improper neutralization of user-controlled input within the new Function constructor, letting remote attackers execute arbitrary code, exploit requires no special conditions.

  • 8.0 /10 High
    CVE-2026-18154 No auth

    IBM Financial Transaction Manager (FTM) - Hardcoded Credentials

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift contains a hardcoded cryptographic key vulnerability, letting remote attackers obtain sensitive information, exploit requires no special privileges.

  • 7.4 /10 High
    CVE-2026-18152 No auth

    IBM Financial Transaction Manager - Authentication Bypass

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift contains a cryptographic signature verification flaw, letting remote attackers forge validly-signed messages, exploit requires network access.

  • 8.1 /10 High
    CVE-2026-18137 No auth

    IBM Financial Transaction Manager - Command Injection

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift contains a command injection caused by improper neutralization of special elements in ESQL commands, letting remote attackers execute arbitrary ESQL commands, exploit requires network access.

  • 7.5 /10 High
    CVE-2026-18134 No auth

    IBM Financial Transaction Manager - Information Disclosure

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift contains an information disclosure vulnerability caused by cleartext transmission of sensitive information, letting remote attackers obtain sensitive data, exploit requires network access.

  • 8.2 /10 High
    CVE-2026-18131 No auth

    IBM Financial Transaction Manager - Stored XSS

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift contains a stored XSS caused by improper neutralization of HTML input, letting remote attackers execute arbitrary JavaScript in authenticated users' browsers, exploit requires user authentication.

  • 7.6 /10 High
    CVE-2026-18123 No auth

    IBM Financial Transaction Manager - Denial of Service

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift contains a denial of service vulnerability caused by improper use of reflection with externally controlled input, letting remote attackers cause service disruption, exploit requires crafted input.

  • 8.5 /10 High
    CVE-2026-18095 Auth required

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift - Buffer Overflow

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift contains a buffer overflow in an unspecified component, letting remote authenticated attackers execute arbitrary code.

  • 8.2 /10 High
    CVE-2026-18074 No auth

    IBM Financial Transaction Manager (FTM) - Broken Access Control

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift contains a broken access control vulnerability caused by improper authentication and missing authorization, letting remote attackers perform unauthorized actions, exploit requires network access.

  • 7.9 /10 High
    CVE-2026-18066 Auth required

    IBM Financial Transaction Manager (FTM) - Server Side Request Forgery

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift contains a server-side request forgery caused by improper validation of server requests, letting local attackers obtain sensitive information and trigger unauthorized actions, exploit requires local access.

  • 8.8 /10 High
    CVE-2026-17647 Auth required

    IBM Financial Transaction Manager (FTM) - Command Injection

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift contains a command injection caused by inclusion of functionality from an untrusted control sphere, letting local attackers execute arbitrary commands, exploit requires local access.

  • 8.5 /10 High
    CVE-2026-17646 Auth required

    IBM Financial Transaction Manager (FTM) - XML External Entity Injection

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift contains an XML external entity injection caused by improper restriction of XML external entity references, letting remote authenticated attackers obtain sensitive information.