Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10425
- Critical
- 1916
- CISA KEV
- 79
- Public PoC
- 384
Most common types
- Broken Access Control 1290
- Privilege Escalation 1190
- Remote Code Execution 1111
- Authentication Bypass 835
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 468 of 695
- 7.1 /10 HighCVE-2026-90161 No auth
Linux Kernel - Information Disclosure
Linux kernel contains an out-of-bounds read vulnerability caused by invalid interlaced ztailpacking pclusters in erofs filesystem, letting attackers with crafted images read kernel memory, exploit requires crafted filesystem images.
- 8.1 /10 HighCVE-2026-90153 Auth required
Linux Kernel ksmbd - Broken Access Control
Linux kernel ksmbd contains a broken access control vulnerability caused by improper bounds checking in smb_check_perm_dacl() ACE walks, letting attackers bypass access control by placing ACEs beyond declared DACL size, exploit requires crafted DACL.
- 9.8 /10 CriticalCVE-2026-90151 No auth
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in NFSv4 callback IDR handling caused by improper cleanup on client allocation failure, letting local attackers cause stale pointer dereference, exploit requires local access.
- 7.5 /10 HighCVE-2026-90149 No auth
Linux Kernel - Denial of Service
Linux kernel contains a NULL dereference vulnerability in NFSv4/flexfiles caused by improper handling of NFSv4.0 data servers without sessions, letting attackers cause kernel oops during I/O operations, exploit requires use of NFSv4.0 data servers.
- 7.8 /10 HighCVE-2026-90146 Auth required
Linux Kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability caused by missing offload checks in bpf_xdp_link_update() allowing users to swap XDP programs improperly, letting attackers bypass intended program restrictions, exploit requires ability to create or update XDP links.
- 7.1 /10 HighCVE-2026-90145 Auth required
Linux Kernel hinic3 - Out-of-Bounds Read & Data Corruption
Linux kernel hinic3 contains an out-of-bounds read and packet corruption vulnerability caused by stale skb fragment count and ignored skb_checksum_help() errors in hinic3_send_one_skb(), letting attackers cause IOMMU faults or transmit corrupted packets, exploit requires crafted tunnel packets.
- 7.8 /10 HighCVE-2026-90143
Linux Kernel - Broken Authentication
Linux kernel contains a broken authentication caused by missing RCU read lock in kcm_parse_func_strparser during BPF parser execution, letting attackers trigger kernel warnings and potential instability, exploit requires kernel-level code execution.
- 7.8 /10 HighCVE-2026-90142
Linux Kernel virtio_net - Buffer Overflow
Linux kernel contains a buffer overflow caused by improper resizing of the RX ring in virtio_net when an AF_XDP socket is attached, letting attackers cause out-of-bounds write, exploit requires AF_XDP socket usage.
- 7.3 /10 HighCVE-2026-90141 No auth
Linux Kernel - Integer Overflow
Linux kernel contains an integer overflow in ipvs ftp helper port/address parsing caused by unchecked accumulation of decimal digits, letting attackers craft FTP responses with truncated port/address, exploit requires crafted FTP PASV/EPSV response.
- 7.7 /10 HighCVE-2026-90137
Linux kernel - Out of Bounds Read
Linux kernel platform/x86 hp-bioscfg contains an out-of-bounds read caused by insufficient bounds checking in password encoding parsing, letting attackers with malformed ACPI packages cause memory access violations, exploit requires crafted ACPI package.
- 7.8 /10 HighCVE-2026-90133 No auth
Linux Kernel ntfs - Out of Bounds Write
Linux kernel ntfs subsystem contains a heap out-of-bounds write caused by lack of bounds checking in ntfs_ir_to_ib() when copying index_root entries, letting attackers trigger memory corruption via crafted filesystem images, exploit requires crafted filesystem.
- 7.1 /10 HighCVE-2026-90132 Auth required
Linux Kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability caused by unprivileged users being able to write to reserved $LX* extended attributes in NTFS, letting attackers modify reserved xattrs, exploit requires CAP_SYS_ADMIN privileges.
- 7.1 /10 HighCVE-2026-90131 Auth required
Linux Kernel ntfs - Race Condition
Linux kernel ntfs subsystem contains a race condition caused by lack of serialization of resident iomap reads with mrec_lock, letting attackers cause data races leading to potential data corruption, exploit requires concurrent link/unlink operations.
- 8.4 /10 HighCVE-2026-90120 No auth
Linux Kernel - Out of Bounds Read/Write
Linux kernel contains a memory corruption vulnerability caused by unchecked get_logical_index() return value in irqchip/gic-v5 MADT IAFFID parsing, letting attackers cause out-of-bounds memory corruption, exploit requires kernel interaction with specific MADT entries.
- 7.8 /10 HighCVE-2026-90118 No auth
Linux Kernel - Out-of-Bounds Write
Linux kernel contains an off-by-one page overflow in ntfs_decompress() caused by improper boundary check, letting attackers trigger out-of-bounds writes when reading corrupted compressed $DATA attributes, exploit requires crafted corrupted NTFS data.