Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10425
- Critical
- 1916
- CISA KEV
- 79
- Public PoC
- 384
Most common types
- Broken Access Control 1290
- Privilege Escalation 1190
- Remote Code Execution 1111
- Authentication Bypass 835
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 461 of 695
- 9.1 /10 CriticalCVE-2026-92860 Auth required
rcourtman Pulse - Improper Input Validation
rcourtman Pulse <= 6.0.4/6.1.0-rc.4 contains an improper input validation vulnerability caused by manipulation of the Username argument in /api/security/quick-setup Quick Security Setup Handler, letting remote attackers potentially exploit the issue.
- 7.8 /10 HighCVE-2026-92838 Auth required
GeoVision GV-Remote E-Map - DLL Hijacking
GeoVision GV-Remote E-Map desktop application contains a DLL hijacking vulnerability caused by loading DLLs from an unsafe search path, letting local attackers execute arbitrary code, exploit requires local write access to the affected directory.
- 7.1 /10 HighCVE-2026-92525 Auth required
Linux Kernel RDMA/rxe - Out-of-Bounds Read
Linux kernel RDMA/rxe contains an out-of-bounds read vulnerability caused by lack of validation of num_sge and cur_sge in user QP WQE, letting local unprivileged users cause a denial of service via out-of-bounds read, exploit requires local user access.
- 7.3 /10 HighCVE-2026-92522 No auth
Linux Kernel - Out of Bounds Read/Write
Linux kernel contains an ACPI processor vulnerability caused by improper validation of MADT IOAPIC entry bounds, letting attackers potentially cause memory corruption or denial of service, exploit requires crafted ACPI tables.
- 7.8 /10 HighCVE-2026-92518
Linux Kernel - Kernel Stack Corruption
Linux kernel contains a kernel stack corruption caused by incorrect tailcall jump offset with CONFIG_CFI_CLANG enabled in BPF riscv, letting attackers cause kernel stack corruption, exploit requires kernel with CONFIG_CFI_CLANG enabled.
- 7.8 /10 HighCVE-2026-92511 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by improper synchronization in ib_destroy_cq_user() during CQ destruction, letting attackers potentially access freed resources, exploit requires access to netlink path.
- 7.8 /10 HighCVE-2026-92510
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by improper synchronization in ib_destroy_srq_user() during SRQ destruction, letting attackers potentially access freed resources, exploit requires access to netlink path.
- 7.8 /10 HighCVE-2026-92508
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by delayed removal of CQ from restrack in ib_free_cq(), letting attackers cause memory corruption or system instability, exploit requires access to netlink path.
- 7.8 /10 HighCVE-2026-92507
Linux Kernel - Use After Free
Linux kernel contains a use after free vulnerability caused by improper synchronization in ib_dealloc_pd_user() during PD resource deallocation, letting attackers potentially access freed memory, exploit requires access to netlink path.
- 7.0 /10 HighCVE-2026-92504
CVE-2026-92504
In the Linux kernel, the following vulnerability has been resolved: thermal: intel: int3400: clean up ODVP on probe failures evaluate_odvp() creates per-ODVP sysfs files before the thermal zone and later probe resources are registered. The current unwind path only calls cleanup_odvp() from the late sysfs failure path, so failures after evaluate_odvp() but before that label, including thermal_tripless_zone_device_register() failures, leave the ODVP files and storage behind. Move the ODVP cleanup to the common ART/TRT unwind path so every failure after evaluate_odvp() releases the ODVP state. Also clear the cached ODVP pointers in cleanup_odvp(), because evaluate_odvp() can already call it for partial setup failures while probe continues.
- 9.8 /10 CriticalCVE-2026-92489 No auth
Linux Kernel - Denial of Service
Linux kernel contains a double-free vulnerability caused by improper skb freeing in xfrm_dev_direct_output(), letting attackers cause denial of service by crashing the kernel, exploit requires packet processing through netfilter.
- 7.0 /10 HighCVE-2026-92488 Auth required
Linux Kernel RDMA/erdma - Resource Leak
Linux kernel RDMA/erdma contains a resource leak vulnerability caused by incomplete object teardown when destroy commands fail, letting attackers cause resource leaks, exploit requires triggering command failures.
- 7.8 /10 HighCVE-2026-92485 Auth required
Linux Kernel - Denial of Service
Linux kernel contains a vulnerability in bpf_tracing_link_release caused by improper flag handling in BPF trampoline, letting attackers cause kernel warnings and potential instability, exploit requires attaching fexit to tail_call_reachable programs.
- 7.5 /10 HighCVE-2026-92230
Apache Karaf - Denial of Service
Apache Karaf contains a denial of service caused by caching XML parser/transformer factories in static ThreadLocal fields, leading to unbounded Metaspace growth when bundles are repeatedly installed or refreshed, letting attackers cause service disruption, exploit requires repeated bundle or feature operations.
- 7.1 /10 HighCVE-2026-91014 No auth
Realtyna Organic IDX & WPL Real Estate WordPress - Reflected XSS
Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin < 5.4.2 contain a reflected XSS caused by unsanitised and unescaped parameters reflected in the page, letting unauthenticated attackers execute scripts in visitors' browsers, exploit requires victim to follow a crafted link.