Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10425
- Critical
- 1916
- CISA KEV
- 79
- Public PoC
- 384
Most common types
- Broken Access Control 1290
- Privilege Escalation 1190
- Remote Code Execution 1111
- Authentication Bypass 835
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 464 of 695
- 7.8 /10 HighCVE-2026-90358 Auth required
Linux Kernel - Memory Corruption
Linux kernel contains a buffer overflow caused by under-allocated register save area for 128-bit arguments in BPF x86 trampoline, letting attackers cause memory corruption, exploit requires local code execution.
- 8.8 /10 HighCVE-2026-90357
Linux kernel mt76 mt7915 - Use After Free
Linux kernel mt76 mt7915 contains a use-after-free vulnerability caused by improper unlinking of TWT flow when MCU rejects the agreement, letting attackers cause memory corruption and dangling pointer dereference, exploit requires specific firmware interaction.
- 7.0 /10 HighCVE-2026-90353 Auth required
Linux kernel mt76 mt7915 - Use After Free
Linux kernel mt76 mt7915 contains a use-after-free vulnerability caused by improper unregistering of ext PHY on register error path, letting attackers cause memory corruption or denial of service, exploit requires triggering register error.
- 8.4 /10 HighCVE-2026-90347 Auth required
Linux Kernel arm64 - Authentication Bypass
Linux kernel arm64 contains a broken authentication caused by incomplete synchronization of 'orig_x0' with 'x0' during syscall entry tracing, letting ptrace tracers manipulate syscall arguments bypassing seccomp and audit checks, exploit requires ptrace capability.
- 7.8 /10 HighCVE-2026-90343
CVE-2026-90343
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: stop PMSR before P2P and NAN teardown PMSR request teardown must abort active measurements while the wireless_dev is still present in the driver. cfg80211_leave_locked() and cfg80211_stop_pd() already do this before invoking the driver's stop callback, but cfg80211_stop_p2p_device() and cfg80211_stop_nan() do not. Those helpers are also called directly by nl80211, rfkill shutdown, and wireless_dev unregister paths. If one of these paths stops a P2P device or NAN interface with a pending request, it removes the mac80211 subinterface from the driver first. Subsequent request cleanup cannot reach the lower driver's abort callback, but cfg80211 frees the request regardless. Driver state can then retain a stale request and use it when it later reports a result. Call cfg80211_pmsr_wdev_down() before stopping the P2P device or NAN interface. This keeps lower-driver request state and cfg80211 request ownership in sync for all of the helpers' callers.
- 7.7 /10 HighCVE-2026-90341
Linux kernel firmware coreboot - Memory Bounds Validation
Linux kernel firmware coreboot contains a memory bounds validation vulnerability caused by improper size and header checks in coreboot_table_probe, letting attackers cause out-of-bounds memory mapping, exploit requires crafted firmware tables.
- 8.2 /10 HighCVE-2026-90332
Linux Kernel - Denial of Service
Linux kernel contains a PCI MSI write flushing issue caused by missing flush of posted MSI writes before unmapping iATU entries in dwc endpoint driver, letting attackers cause MSI write loss or misrouting, exploit requires hardware interaction with MSI and iATU mappings.
- 8.8 /10 HighCVE-2026-90329 No auth
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by concurrent report callbacks during failed HID device probe cleanup, letting attackers cause memory corruption, exploit requires triggering a failed probe.
- 7.8 /10 HighCVE-2026-90326
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by a race condition between blkcg_activate_policy() and concurrent blkcg deletion in blk-cgroup, letting attackers trigger memory corruption during IO scheduler switching, exploit requires concurrent blkcg deletion and policy activation.
- 7.8 /10 HighCVE-2026-90325 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in blk-cgroup during IO scheduler switching caused by a race condition in blkcg_activate_policy(), letting attackers cause memory corruption, exploit requires concurrent blkcg deletion.
- 7.8 /10 HighCVE-2026-90324 Auth required
Linux Kernel - Denial of Service
Linux kernel contains a denial of service caused by improper handling of import_ubuf() failure in ublk, letting attackers cause system instability, exploit requires user space ublk server to provide out-of-range address.
- 7.8 /10 HighCVE-2026-90321 No auth
Linux Kernel OCFS2 - Use After Free
Linux kernel OCFS2 filesystem contains a use-after-free vulnerability caused by lack of inline xattr entry bounds validation during inode block validation, letting local attackers cause memory corruption, exploit requires access to OCFS2 filesystem with crafted metadata.
- 7.8 /10 HighCVE-2026-90320
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in ocfs2 external xattr metadata handling caused by insufficient validation of xattr block headers, letting attackers cause memory corruption or kernel crash, exploit requires crafted external xattr metadata.
- 7.8 /10 HighCVE-2026-90317
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in BPF caused by invalid RCU pointer handling after final spin unlock, letting attackers trigger task_struct use-after-free, exploit requires capability-limited runtime.
- 7.8 /10 HighCVE-2026-90316
Linux Kernel drm/omap dsi - Use After Free
Linux kernel drm/omap dsi contains a use-after-free caused by copying the ISR table leading to stack-allocated objects being freed during IRQ unregistration, letting attackers cause memory corruption, exploit requires IRQ unregistration during handling.