Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10425
Critical
1916
CISA KEV
79
Public PoC
384

Most common types

  • Broken Access Control 1290
  • Privilege Escalation 1190
  • Remote Code Execution 1111
  • Authentication Bypass 835
  • Denial of Service 799

Published per day, last 14 days

7 Oct Critical Other 20 Oct

Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 457 of 695

  • 7.0 /10 High
    CVE-2026-93116 Auth required

    Linux Kernel asus-wmi - Resource Leak

    Linux kernel platform/x86 asus-wmi driver contains a resource leak vulnerability caused by improper error path handling in asus_wmi_add(), letting attackers cause resource leaks during driver initialization, exploit requires driver initialization failure.

  • 7.1 /10 High
    CVE-2026-93112

    Linux Kernel - Broken Access Control

    Linux kernel contains a broken access control vulnerability caused by bpf_cpumask_populate() accepting read-only cpumask pointers as writable destination, letting attackers bypass ownership rules, exploit requires kernel function usage.

  • 7.8 /10 High
    CVE-2026-93111 Auth required

    Linux Kernel - Broken Access Control

    Linux kernel contains a broken access control vulnerability caused by tracing_multi trampolines not being marked as ftrace managed, letting attackers cause resource release failures, exploit requires attaching tracing_multi and fentry links.

  • 8.2 /10 High
    CVE-2026-93107 No auth

    Linux Kernel RDMA/rxe - Race Condition

    Linux kernel RDMA/rxe contains a logic flaw in packet processing after QP enters error state, causing duplicate packet completions and potential stream corruption, letting attackers cause data tampering, exploit requires race condition between disconnect and receive processing.

  • 7.8 /10 High
    CVE-2026-93105

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability caused by esp_ssg_unref() incorrectly unreferencing managed frag pages in esp, letting attackers cause page reference underflow and potential memory corruption, exploit requires use of managed frag skb.

  • 7.8 /10 High
    CVE-2026-93095 Auth required

    Linux Kernel - Out of Bounds Read/Write

    Linux kernel contains a buffer overflow caused by improper validation of HFS+ thread record size and type in hfsplus_delete_cat(), letting attackers with a corrupted image trigger out-of-bounds write, exploit requires crafted corrupted HFS+ image.

  • 7.8 /10 High
    CVE-2026-93079 Auth required

    Linux Kernel - Out of Bounds Write

    Linux kernel contains a heap out-of-bounds write caused by improper validation of feature count against output buffer size in cxlctl_get_feature(), letting attackers cause memory corruption, exploit requires crafted request.

  • 7.8 /10 High
    CVE-2026-93074 Auth required

    Linux Kernel - Memory Address Calculation Flaw

    Linux kernel contains a memory address calculation flaw in dax/fsdev direct_access caused by incorrect virtual address computation, letting attackers cause incorrect kernel virtual address usage, exploit requires kernel-level access.

  • 7.8 /10 High
    CVE-2026-93070

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability caused by double freeing auxiliary device pdata in ipu6_bus_initialize_device, letting attackers cause system instability or denial of service, exploit requires triggering MMU initialization failure or auxiliary device add failure.

  • 8.4 /10 High
    CVE-2026-93063 No auth

    Linux Kernel - Buffer Overflow

    Linux kernel contains a buffer overflow caused by improper SAP message length validation in iwlwifi mei component, letting attackers cause memory corruption, exploit requires crafted SAP messages.

  • 7.0 /10 High
    CVE-2026-93054 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in UIO device registration caused by stale info pointer after failed registration, letting local userspace attackers cause memory corruption, exploit requires race condition during device setup failure.

  • 7.0 /10 High
    CVE-2026-93046 Auth required

    Linux Kernel - Out of Bounds Read

    Linux kernel contains an out of bounds read caused by improper bounds check in software_node_get_reference_args() when passed UINT_MAX, letting attackers cause memory corruption, exploit requires crafted input.

  • 7.8 /10 High
    CVE-2026-93045

    Linux Kernel - Memory Corruption

    Linux kernel contains a memory corruption vulnerability caused by improper handling of scalar arena addresses in bpf_arena_free_pages(), letting attackers cause out-of-range frees leading to potential memory corruption, exploit requires crafted scalar arena addresses.

  • 8.8 /10 High
    CVE-2026-93042 No auth

    Linux Kernel dmaengine - Use After Free

    Linux kernel dmaengine dw-edma contains a use-after-free vulnerability caused by late callbacks after dmaengine_terminate_sync() in descriptor termination, letting attackers cause memory corruption or leaks, exploit requires device to perform DMA transfers.

  • 7.4 /10 High
    CVE-2026-93039

    Linux Kernel ASoC meson - Use After Free

    Linux kernel ASoC meson contains a use-after-free and double free caused by improper handling of link pointers on krealloc failure in meson_card_reallocate_links(), letting attackers cause memory corruption, exploit requires kernel code execution.