Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10425
Critical
1916
CISA KEV
79
Public PoC
384

Most common types

  • Broken Access Control 1290
  • Privilege Escalation 1190
  • Remote Code Execution 1111
  • Authentication Bypass 835
  • Denial of Service 799

Published per day, last 14 days

7 Oct Critical Other 20 Oct

Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 446 of 695

  • 8.9 /10 High
    CVE-2026-84070 Auth required

    IBM Guardium Data Protection - Remote Code Execution

    IBM Guardium Data Protection 12.2 contains a remote code execution caused by improper neutralization of input during web page generation, letting remote authenticated attackers execute arbitrary code.

  • 9.9 /10 Critical
    CVE-2026-84064 Auth required

    IBM Guardium Data Protection - SQL Injection

    IBM Guardium Data Protection 12.2 contains a SQL injection caused by improper neutralization of special elements in SQL commands, letting remote authenticated attackers execute arbitrary SQL commands.

  • 7.4 /10 High
    CVE-2026-84036 Auth required

    IBM Guardium Data Protection - Broken Access Control

    IBM Guardium Data Protection 12.2 contains a broken access control vulnerability caused by improper authorization, letting remote authenticated attackers bypass security restrictions.

  • 8.8 /10 High
    CVE-2026-84034 Auth required

    IBM Guardium Data Protection - Hardcoded Credentials

    IBM Guardium Data Protection 12.2 contains a hardcoded credentials vulnerability in hardware_assess/obstore binaries, letting low-privileged authenticated users recover master secrets and access internal database.

  • 9.0 /10 Critical
    CVE-2026-84031 Auth required

    IBM Guardium Data Protection - Remote Code Execution

    IBM Guardium Data Protection 12.2 contains a remote code execution caused by improper neutralization of input during web page generation, letting remote authenticated attackers execute arbitrary code.

  • 8.2 /10 High
    CVE-2026-83946 No auth

    Azure Portal - Reflected XSS

    Azure Portal contains a reflected XSS caused by improper neutralization of input during web page generation, letting unauthorized attackers perform spoofing over a network, exploit requires no special privileges.

  • 7.2 /10 High
    CVE-2026-83561 No auth

    Complianz GDPR/CCPA Cookie Consent Banner - Stored XSS

    Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress <= 7.5.4 contains a stored cross-site scripting caused by insufficient input sanitization and output escaping in Comment Content via Elementor Cookie Blocker Regex, letting unauthenticated attackers inject scripts executed on user page access, exploit requires admin approval of attacker comment and specific plugin configurations.

  • 9.8 /10 Critical
    CVE-2026-82967 No auth

    IBM Guardium Data Protection - Authentication Bypass

    IBM Guardium Data Protection 12.2 contains an authentication bypass caused by improper IP-based access control validation, letting unauthenticated remote attackers access the management interface, exploit requires no special privileges.

  • 7.6 /10 High
    CVE-2026-82896 Auth required

    IBM Guardium Data Protection - Path Traversal

    IBM Guardium Data Protection 12.2 contains a path traversal caused by improper input validation, letting remote authenticated attackers access arbitrary directories, exploit requires authentication.

  • 7.8 /10 High
    CVE-2026-82893 Auth required

    IBM Guardium Data Protection - Privilege Escalation

    IBM Guardium Data Protection 12.2 contains a privilege escalation caused by improper privilege management, letting local attackers gain elevated privileges, exploit requires local access.

  • 8.1 /10 High
    CVE-2026-82892 No auth

    IBM Guardium Data Protection - Command Injection

    IBM Guardium Data Protection 12.2 contains a command injection caused by improper neutralization of special elements in OS commands, letting remote attackers execute arbitrary commands, exploit requires network access.

  • 8.8 /10 High
    CVE-2026-82887 Auth required

    IBM Guardium Data Protection - Command Injection

    IBM Guardium Data Protection 12.2 contains a command injection caused by improper neutralization of special elements in OS commands, letting remote authenticated attackers execute arbitrary commands.

  • 8.8 /10 High
    CVE-2026-82885 Auth required

    IBM Guardium Data Protection - Broken Access Control

    IBM Guardium Data Protection 12.2 contains a broken access control caused by missing authorization in the REST API, letting remote authenticated attackers gain elevated privileges.

  • 9.6 /10 Critical
    CVE-2026-82832 Auth required

    IBM Guardium Data Protection - Remote Code Execution

    IBM Guardium Data Protection 12.2 contains a remote code execution caused by improper neutralization of input during web page generation, letting remote authenticated attackers execute arbitrary code.

  • 9.8 /10 Critical
    CVE-2026-82340

    IBM Guardium Data Protection - Insecure Deserialization

    IBM Guardium Data Protection 12.2 contains an insecure deserialization vulnerability caused by attacker-controlled reflective method dispatch in the Change Audit System listener, letting network attackers execute code remotely, exploit requires network access to TCP port 16017.