Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10425
- Critical
- 1916
- CISA KEV
- 79
- Public PoC
- 384
Most common types
- Broken Access Control 1290
- Privilege Escalation 1190
- Remote Code Execution 1111
- Authentication Bypass 835
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 462 of 695
- 7.4 /10 HighCVE-2026-90997
Keycloak - Authentication Bypass
Keycloak contains a replay protection bypass caused by row-count semantic mismatch in stateless mode with MySQL or MariaDB, letting attackers replay single-use security artifacts to gain unauthorized access, exploit requires stateless mode deployment.
- 7.1 /10 HighCVE-2026-90986 No auth
Visitor Traffic Real Time Statistics Pro - Reflected XSS
Visitor Traffic Real Time Statistics Pro <= 11.21 contains a reflected XSS caused by improper input sanitization, letting unauthenticated attackers execute scripts in users' browsers, exploit requires no authentication.
- 7.1 /10 HighCVE-2026-90887 No auth
WP Inventory Manager - Stored XSS
WP Inventory Manager <= 2.5.4 contains a stored XSS caused by improper input sanitization, letting unauthenticated attackers execute scripts in users' browsers, exploit requires no authentication.
- 9.8 /10 CriticalCVE-2026-90823 No auth
FatPipe MPVPN, WARP, and IPVPN - Remote Code Execution
FatPipe MPVPN, WARP, and IPVPN appliances 10.1.2r60p100 contain a stack-based buffer overflow caused by unchecked copy in /usr/sbin/auth_user_pass, letting unauthenticated remote attackers execute arbitrary code as root, exploit requires enabled management interface.
- 9.8 /10 CriticalCVE-2026-90822 No auth
FatPipe MPVPN, WARP, and IPVPN - Command Injection
FatPipe MPVPN, WARP, and IPVPN appliances 10.1.2r60p100 contain a command injection caused by improper input handling in the xtremed daemon's AuthFormServlet endpoint, letting unauthenticated remote attackers execute arbitrary root commands, exploit requires enabled management interface.
- 7.8 /10 HighCVE-2026-90435 Auth required
Linux kernel RDMA/mlx5 - Integer Overflow
Linux kernel RDMA/mlx5 contains an integer overflow caused by improper left-shift operations on user-supplied QP buffer size parameters, letting attackers cause buffer size miscalculation, exploit requires crafted user input.
- 7.8 /10 HighCVE-2026-90429 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by unsynchronized access to cmdqv->vintfs[] slots in iommu/tegra241-cmdqv error ISR, letting attackers cause NULL dereference or use-after-free, exploit requires concurrent error interrupts.
- 7.4 /10 HighCVE-2026-90427
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in iommu/tegra241-cmdqv caused by dereferencing a freed smmu pointer after devm_krealloc() failure, letting attackers cause system instability or crash, exploit requires kernel code execution.
- 8.8 /10 HighCVE-2026-90425
Linux Kernel - Logic Flaw in Stream ID Mapping
Linux kernel iommu/tegra241-cmdqv contains a logic flaw caused by improper handling of devices with multiple or zero Stream IDs in tegra241_vintf_init_vsid(), letting attackers cause invalid guest vSID mappings and out-of-bounds reads, exploit requires device with incorrect stream count.
- 7.8 /10 HighCVE-2026-90423 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by improper error handling in RDMA rxe ODP init path, letting attackers cause memory corruption, exploit requires triggering ODP init failure.
- 7.1 /10 HighCVE-2026-90419 No auth
Linux Kernel - Out of Bounds Read
Linux kernel contains an out-of-bounds read vulnerability caused by trusting super-root inode metadata size before nilfs_read_inode_common(), letting attackers craft malformed filesystem images to cause out-of-bounds read, exploit requires crafted filesystem image.
- 9.1 /10 CriticalCVE-2026-90414 No auth
Linux Kernel IB/isert - Out-of-Bounds Read
Linux kernel IB/isert contains an out-of-bounds read vulnerability caused by accepting PDUs declaring more data than actually received, letting remote initiators cause memory corruption, exploit requires a malicious initiator after login.
- 9.1 /10 CriticalCVE-2026-90413 No auth
Linux Kernel - Out-of-Bounds Read
Linux kernel contains a buffer over-read vulnerability in IB/isert due to accepting login PDUs declaring more data than received, letting remote attackers cause out-of-bounds read, exploit requires crafted login PDUs with mismatched declared length.
- 7.7 /10 HighCVE-2026-90408 No auth
Linux Kernel - Out-of-Bounds Read
Linux kernel contains an out-of-bounds read vulnerability in ath12k_wmi_process_csa_switch_count_event caused by missing length checks on WMI_TAG_PDEV_CSA_SWITCH_COUNT_STATUS_EVENT event struct, letting attackers cause memory overreads, exploit requires crafted firmware event.
- 7.7 /10 HighCVE-2026-90407 No auth
Linux Kernel - Out of Bounds Read
Linux kernel contains a buffer overread in ath11k_wmi_process_csa_switch_count_event caused by missing length checks on WMI_TAG_PDEV_CSA_SWITCH_COUNT_STATUS_EVENT event struct and unchecked num_vdevs field, letting attackers cause out-of-bounds reads, exploit requires crafted firmware event.