Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10425
Critical
1916
CISA KEV
79
Public PoC
384

Most common types

  • Broken Access Control 1290
  • Privilege Escalation 1190
  • Remote Code Execution 1111
  • Authentication Bypass 835
  • Denial of Service 799

Published per day, last 14 days

7 Oct Critical Other 20 Oct

Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 463 of 695

  • 7.0 /10 High
    CVE-2026-90403

    Linux Kernel - Resource Cleanup Error

    Linux kernel contains a resource cleanup error in rtl_pci_probe() of rtlwifi PCI driver, caused by incorrect goto label skipping cleanup functions, letting attackers potentially cause resource leaks or instability, exploit requires triggering device initialization.

  • 7.0 /10 High
    CVE-2026-90402

    Linux Kernel - Denial of Service

    Linux kernel contains a device management flaw caused by improper cleanup in mhi_register_controller() when sysfs_create_file() fails, letting attackers cause resource leaks or inconsistent device states, exploit requires triggering sysfs failure.

  • 7.1 /10 High
    CVE-2026-90401

    Linux Kernel md - Data Integrity & Availability Impact

    Linux kernel md subsystem removes REQ_NOWAIT support from raid1, raid10, and raid456 due to incomplete handling causing potential data divergence on write failures, letting attackers cause data inconsistency, exploit requires ability to trigger writes on affected RAID levels.

  • 8.4 /10 High
    CVE-2026-90399 No auth

    Linux Kernel - Buffer Overflow

    Linux kernel contains a buffer overflow caused by stride mismatch in ath12k_wmi_mac_phy_caps_parse() during mac_phy_caps buffer allocation and memcpy, letting attackers cause memory corruption, exploit requires crafted firmware TLVs.

  • 8.4 /10 High
    CVE-2026-90398

    Linux Kernel - Buffer Overflow

    Linux kernel contains a buffer overflow caused by a stride mismatch in ath11k_wmi_tlv_mac_phy_caps_parse() during mac_phy_caps buffer allocation, letting attackers cause memory corruption, exploit requires crafted firmware TLVs.

  • 7.8 /10 High
    CVE-2026-90392

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability caused by accessing bpf link program pointer without proper locking in bpf_link_show_fdinfo and bpf_link_get_info_by_fd, letting attackers cause memory corruption, exploit requires concurrent bpf_link_update.

  • 7.8 /10 High
    CVE-2026-90388 Auth required

    Linux Kernel - Memory Allocation Handling Flaw

    Linux kernel contains a memory allocation handling flaw in iommu/dma non-blocking, non-coherent allocation path, caused by improper failure detection in dma_alloc_from_pool(), letting kernel potentially mismanage IOMMU mappings, exploit requires kernel code execution.

  • 7.8 /10 High
    CVE-2026-90387 Auth required

    Linux Kernel - Memory Management Vulnerability

    Linux kernel contains a memory management vulnerability caused by incorrect virtual address handling in swiotlb dynamic pools, letting attackers cause allocation failures or memory corruption, exploit requires kernel-level access.

  • 7.8 /10 High
    CVE-2026-90383 Auth required

    Linux kernel misc: sgi-gru - Denial of Service

    Linux kernel misc: sgi-gru contains a vulnerability caused by interrupt-context page-table walks without proper locking, letting attackers cause potential system instability or denial of service, exploit requires interrupt context.

  • 8.8 /10 High
    CVE-2026-90381

    Linux kernel mt76 - Denial of Service

    Linux kernel contains a vulnerability in mt76 driver caused by improper handling of channel context with different bands in mt76_switch_vif_chanctx(), letting attackers cause potential disruption during channel switches, exploit requires performing rapid channel switches on different radios.

  • 8.8 /10 High
    CVE-2026-90380 No auth

    Linux kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in mt76_rx_poll_complete caused by a race condition where rx_status holds a pointer to a removed STA's wcid, letting attackers cause memory corruption or kernel crash, exploit requires triggering specific race conditions.

  • 8.8 /10 High
    CVE-2026-90379

    Linux Kernel mt76 - Denial of Service

    Linux kernel mt76 mt7921 driver contains an invalid memory access vulnerability caused by unvalidated DMA queue index reads returning 0xFFFFFFFF during PCIe AER bus hang, letting attackers cause system crashes, exploit requires hardware bus hang condition.

  • 7.1 /10 High
    CVE-2026-90372

    Linux kernel mt76 mt7915 - Buffer Underflow

    Linux kernel mt76 mt7915 contains a buffer underflow caused by improper handling of peer's VHT/HE MCS map with no supported spatial stream in mt7915_mcu_get_sta_nss, letting attackers cause potential data corruption, exploit requires crafted peer MCS map.

  • 8.8 /10 High
    CVE-2026-90371 No auth

    Linux Kernel mt76 - Race Condition

    Linux kernel contains a race condition in mt76 wifi driver caused by improper RXDMAD_C buffer recycling from RRO data queues' page pools, letting attackers cause denial of service, exploit requires triggering network traffic.

  • 8.8 /10 High
    CVE-2026-90367

    Linux Kernel mt76 - Race Condition

    Linux kernel mt76 driver contains a race condition caused by improper mutex handling during tx worker disable in mt7996, letting attackers cause descriptor corruption via L1 SER during channel switch, exploit requires hardware error condition.