Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10425
- Critical
- 1916
- CISA KEV
- 79
- Public PoC
- 384
Most common types
- Broken Access Control 1290
- Privilege Escalation 1190
- Remote Code Execution 1111
- Authentication Bypass 835
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 447 of 695
- 7.5 /10 HighCVE-2026-81944 Auth required
PLANET IGS-5225-8P2T4S - Buffer Overflow
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow caused by insufficient bounds checking in the web server, letting remote authenticated attackers cause denial of service or execute arbitrary code.
- 8.8 /10 HighCVE-2026-81942 Auth required
PLANET IGS-5225-8P2T4S - Command Injection & Privilege Escalation
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware < 1.2412b260707 and < 2.2412b260519 contain a command injection caused by insufficient filtering of user input in the web server, letting remote authenticated attackers execute arbitrary OS commands and escalate privileges to root.
- 7.2 /10 HighCVE-2026-81937 Auth required
IBM Guardium Data Protection - Command Injection
IBM Guardium Data Protection 12.2 contains a command injection caused by improper sanitization of the filename parameter in the import remotelog_config CLI command, letting highly privileged authenticated users execute arbitrary commands with root privileges.
- 8.8 /10 HighCVE-2026-81933 Auth required
IBM Guardium Data Protection - SQL Injection
IBM Guardium Data Protection 12.2 contains a sql injection caused by improper input sanitization in the Analytic Grid Service Handler, letting low-privileged authenticated users access sensitive data and impact system confidentiality, integrity, and availability, exploit requires low-privileged authentication.
- 7.2 /10 HighCVE-2026-81810 Auth required
All-in-One WP Migration and Backup WordPress plugin - Broken Access Control
All-in-One WP Migration and Backup WordPress plugin < 7.111 contains a broken access control vulnerability caused by missing capability checks on AJAX actions gated by an installation-wide secret, letting users with export capability gain administrator access by importing arbitrary site archives, exploit requires misconfiguration granting export capability to non-import roles.
- 7.2 /10 HighCVE-2026-81669 Auth required
IBM Guardium Data Protection - Command Injection
IBM Guardium Data Protection 12.2 contains a command injection caused by improper sanitization of the alias input in the create csr wildcard CLI command, letting authenticated privileged CLI users execute arbitrary commands with root privileges.
- 9.8 /10 CriticalCVE-2026-81657 No auth
IBM Guardium Data Protection - Remote Code Execution
IBM Guardium Data Protection 12.2 contains an insecure deserialization vulnerability caused by deserialization of untrusted data, letting remote unauthenticated attackers execute arbitrary code.
- 8.8 /10 HighCVE-2026-81656 Auth required
IBM Guardium Data Protection - SQL Injection
IBM Guardium Data Protection 12.2 contains a sql injection caused by improper sanitization in the New Query Builder REST Processor, letting low-privileged authenticated users access or modify data, exploit requires authentication.
- 8.2 /10 HighCVE-2026-81627 Auth required
QEMU - Privilege Escalation
QEMU contains a privilege escalation caused by improper validation of writable RAM alias in VAPIC setup hypercall, letting privileged guest users inject code into System Management Mode memory, exploit requires privileged guest access.
- 8.6 /10 HighCVE-2026-81626 No auth
IBM Guardium Data Protection - SQL Injection
IBM Guardium Data Protection 12.2 contains a SQL injection caused by unsanitized input in the Load Balancer Groups component via the Load Balancer Servlet endpoint, letting unauthenticated attackers access and manipulate data remotely, exploit requires no authentication.
- 9.8 /10 CriticalCVE-2026-81321
CM2507 IP cameras - Information Disclosure
CM2507 IP cameras contain an information disclosure vulnerability caused by storing wireless network credentials in cleartext within the device filesystem, letting attackers with filesystem access recover network identifiers and keys, exploit requires physical or debugging interface access.
- 8.8 /10 HighCVE-2026-81180 Auth required
SysReptor Professional - Remote Code Execution
SysReptor Professional < 2026.61 contains a code injection vulnerability caused by image processing invoking Ghostscript and a race condition with GnuPG configuration, letting authenticated users execute arbitrary code with application privileges, exploit requires authenticated user.
- 8.1 /10 HighCVE-2026-81179 No auth
SysReptor - Open Redirect
SysReptor < 2026.58 contains an open redirect caused by accepting attacker-controlled Host header in password reset link generation, letting unauthenticated attackers reset victim passwords via crafted reset emails, exploit requires email gateway and victim email.
- 9.9 /10 CriticalCVE-2026-80442 Auth required
IBM Guardium Data Protection - Command Injection
IBM Guardium Data Protection 12.2 contains an authenticated command injection caused by improper input handling in exportCertificate functionality, letting authenticated attackers execute unauthorized OS commands.
- 9.8 /10 CriticalCVE-2026-80441 No auth
IBM Guardium Data Protection - SQL Injection
IBM Guardium Data Protection 12.2 contains a second-order SQL injection caused by improper sanitization in generateInsertQuery functionality of change-tracker-data.sql, letting remote attackers compromise confidentiality, integrity, and availability, exploit requires no authentication.