Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10425
Critical
1916
CISA KEV
79
Public PoC
384

Most common types

  • Broken Access Control 1290
  • Privilege Escalation 1190
  • Remote Code Execution 1111
  • Authentication Bypass 835
  • Denial of Service 799

Published per day, last 14 days

7 Oct Critical Other 20 Oct

Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 428 of 695

  • 8.8 /10 High
    CVE-2026-94128 PoC publicAuth required

    BioStar VIVID LED - Write-What-Where Condition

    BioStar VIVID LED 4.0.2411.1500 contains a write-what-where condition caused by manipulation of the AssociatedIrp argument in IOCTL Handler sub_1105C, letting local attackers write arbitrary memory.

  • 7.3 /10 High
    CVE-2026-94110 No auth

    QCMS - SQL Injection

    QCMS <= 6.0.6 contains a SQL injection caused by improper sanitization of the "ID" argument in self_Tmp function of Lib/Config/Controllers.php Content Detail Page, letting remote attackers execute arbitrary SQL commands, exploit requires payloads with literal spaces due to raw REQUEST_URI usage.

  • 9.9 /10 Critical
    CVE-2026-94101 Auth required

    Netcore NBR200V2 - Buffer Overflow

    Netcore NBR200V2 1.3.241127.071246 contains a buffer overflow caused by manipulation of the "wan_num" argument in vlan_load_form_uci function of /usr/bin/routerd, letting remote attackers cause memory corruption, exploit requires no special privileges.

  • 9.9 /10 Critical
    CVE-2026-94100 Auth required

    Netcore NBR200V2 - Buffer Overflow

    Netcore NBR200V2 1.3.241127.071246 contains a buffer overflow caused by manipulation of the argument vlan_wanX.ports in wan_config_set_vlan function of /usr/bin/routerd, letting remote attackers cause memory corruption, exploit requires remote access.

  • 9.9 /10 Critical
    CVE-2026-94099 Auth required

    Netcore NBR200V2 - Command Injection

    Netcore NBR200V2 1.3.241127.071246 contains a command injection caused by manipulation of the QUERY_STRING argument in restore.cgi Backup Restore component, letting remote attackers execute arbitrary commands, exploit requires crafted request.

  • 9.1 /10 Critical
    CVE-2026-94098 Auth required

    Netcore NBR200V2 - Command Injection

    Netcore NBR200V2 1.3.241127.071246 contains a command injection caused by manipulation of the QUERY_STRING argument in /www/cgi-bin/upgrade Firmware Upgrade CGI Endpoint, letting remote attackers execute arbitrary commands, exploit requires no special privileges.

  • 10.0 /10 Critical
    CVE-2026-94097 No auth

    Netcore NBR200V2 - Command Injection

    Netcore NBR200V2 1.3.241127.071246 contains a command injection caused by manipulation of the argument param/key/val in /www/cgi-bin/network_tools CGI Diagnostic Endpoint, letting remote attackers execute arbitrary commands, exploit requires no special privileges.

  • 9.9 /10 Critical
    CVE-2026-94096 Auth required

    Netcore NBR200V2 - Command Injection

    Netcore NBR200V2 1.3.241127.071246 contains a command injection caused by manipulation of the "ipv4" argument in /usr/bin/network_tools LAN IP Configuration Handler, letting remote attackers execute arbitrary commands, exploit requires no special privileges.

  • 9.9 /10 Critical
    CVE-2026-94095 PoC publicAuth required

    Netcore NBR200V2 - Command Injection

    Netcore NBR200V2 1.3.241127.071246 contains a command injection caused by manipulation of the "url" argument in /usr/bin/network_tools Traceroute Diagnostic Feature, letting remote attackers execute arbitrary commands, exploit requires no special privileges.

  • 9.8 /10 Critical
    CVE-2026-93012 No auth

    Email::Sender::Transport::Sendmail - Command Injection

    Email::Sender::Transport::Sendmail < 2.602 for Perl contains a command injection caused by unsafe shell command construction on Windows in _sendmail_pipe, letting attackers execute arbitrary commands via crafted email headers, exploit requires attacker control of email headers.

  • 8.8 /10 High
    CVE-2026-92574 Auth required

    CRI-O - Broken Access Control

    CRI-O 1.34 and later contain a broken access control vulnerability caused by improper enforcement of Kubernetes security context during checkpoint restore, letting users with pod creation permissions execute processes with elevated privileges, exploit requires permission to create pods from malicious checkpointed containers.

  • 7.5 /10 High
    CVE-2026-91866 No auth

    Neethi - Denial of Service

    Neethi contains a denial of service caused by specially crafted WS-Policy documents forcing exponential work in policy-intersection, letting attackers pin CPU usage, exploit requires crafted WS-Policy documents.

  • 7.5 /10 High
    CVE-2026-91865 No auth

    Neethi - Denial of Service

    Neethi contains a denial of service caused by repeated WS-Policy references re-expansion during normalization, letting attackers consume excessive CPU and memory, exploit requires crafted WS-Policy documents.

  • 7.5 /10 High
    CVE-2026-91864 No auth

    Neethi - Denial of Service

    Neethi contains a denial of service caused by unbounded content in WS-Policy assertions leading to heap exhaustion, letting attackers cause service disruption, exploit requires crafted WS-Policy document.

  • 7.5 /10 High
    CVE-2026-91863 No auth

    Neethi - Denial of Service

    Neethi contains a denial of service caused by a specially crafted WS-Policy document with deeply nested policy elements bypassing the nesting-depth limit, letting attackers crash the parser remotely, exploit requires crafted WS-Policy document.