Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10425
- Critical
- 1916
- CISA KEV
- 79
- Public PoC
- 384
Most common types
- Broken Access Control 1290
- Privilege Escalation 1190
- Remote Code Execution 1111
- Authentication Bypass 835
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 467 of 695
- 7.1 /10 HighCVE-2026-90223 No auth
Linux kernel NFC llcp - Out-of-Bounds Read
Linux kernel NFC llcp contains an out-of-bounds read vulnerability caused by unbounded SNL TLV parsing in nfc_llcp_recv_snl(), letting nearby attackers cause memory corruption or denial of service, exploit requires NFC link activation.
- 7.8 /10 HighCVE-2026-90217 Auth required
Linux kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability caused by improper comparison of iterator stack slot types in BPF state pruning, letting attackers cause unsafe path pruning, exploit requires crafted BPF programs.
- 7.8 /10 HighCVE-2026-90210
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in bpf_trampoline_multi_attach_free caused by freeing old_image when it is still in use, letting attackers cause memory corruption, exploit requires kernel code execution.
- 7.8 /10 HighCVE-2026-90207 Auth required
Linux Kernel ALSA seq midi - Denial of Service
Linux kernel ALSA seq midi contains a NULL pointer dereference caused by unsynchronized input teardown in snd_midi_input_event during rawmidi substream closing, letting attackers cause kernel crash, exploit requires triggering rawmidi input events.
- 7.8 /10 HighCVE-2026-90205
Linux Kernel OCFS2 - Use After Free
Linux kernel OCFS2 contains a use-after-free vulnerability caused by lack of validation of active orphan slots during inode read, letting attackers cause out-of-bounds memory access, exploit requires corrupted dinode with OCFS2_ORPHANED_FL flag.
- 7.8 /10 HighCVE-2026-90204 No auth
Linux kernel ocfs2 - Use After Free
Linux kernel ocfs2 contains a use-after-free vulnerability caused by improper validation of i_dio_orphaned_slot during inode read, letting attackers trigger memory corruption, exploit requires crafted corrupted append-DIO dinode.
- 7.1 /10 HighCVE-2026-90203 No auth
Linux Kernel Squashfs - Out of Bounds Read
Linux kernel Squashfs contains an out of bounds read caused by lack of negative offset validation in decompressed fragment block, letting attackers with CAP_SYS_ADMIN mount crafted filesystems and trigger out of bounds access.
- 7.8 /10 HighCVE-2026-90199 No auth
Linux Kernel - Improper Input Validation
Linux kernel contains a vulnerability in fs/ntfs3 where improper validation of evcn in mi_enum_attr() allows malformed on-disk attributes to bypass checks due to evcn wraparound, letting attackers cause potential data corruption or denial of service, exploit requires crafted malformed NTFS attributes.
- 8.4 /10 HighCVE-2026-90191
Linux kernel mailbox riscv-sbi-mpxy - Buffer Validation Vulnerability
Linux kernel mailbox riscv-sbi-mpxy contains a buffer validation vulnerability caused by improper validation of RPMI notification lengths, letting attackers cause memory corruption or denial of service, exploit requires crafted shared memory input.
- 7.8 /10 HighCVE-2026-90177 Auth required
Linux Kernel - Pointer Type Verification Bypass
Linux kernel contains a pointer type verification bypass in BPF atomic RMW paths caused by incomplete pointer type checks, letting attackers cause inconsistent pointer handling, exploit requires crafted BPF programs.
- 8.1 /10 HighCVE-2026-90176 Auth required
Linux kernel ksmbd - Broken Access Control
Linux kernel ksmbd contains a broken access control vulnerability caused by skipping lock checks for single-byte ranges in check_lock_range(), letting attackers bypass byte-range lock checks, exploit requires file operations on single-byte ranges.
- 7.1 /10 HighCVE-2026-90174 Auth required
Linux kernel ksmbd - Out-of-Bounds Read
Linux kernel ksmbd contains a slab-out-of-bounds read caused by unchecked resp->hash_sz in ksmbd_alloc_user(), letting attackers trigger out-of-bounds memory read, exploit requires a malformed or malicious mountd IPC login response.
- 9.8 /10 CriticalCVE-2026-90173 No auth
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in smbdirect caused by improper teardown of completion queues with ib_destroy_cq(), letting attackers cause kernel memory corruption, exploit requires triggering late completion after queue destruction.
- 7.5 /10 HighCVE-2026-90172
Linux Kernel smbdirect - Use After Free
Linux kernel smbdirect contains a use-after-free caused by improper teardown order in smbdirect_accept_connect_request error path, letting attackers cause kernel memory corruption, exploit requires triggering rdma_accept_failed error.
- 8.8 /10 HighCVE-2026-90162 Auth required
Linux kernel ksmbd - Use-After-Free
Linux kernel ksmbd contains a use-after-free and double-free race condition caused by premature publishing of granted locks in smb2_lock(), letting concurrent attackers cause memory corruption, exploit requires concurrent SMB2_LOCK and UNLOCK requests.