Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10425
Critical
1916
CISA KEV
79
Public PoC
384

Most common types

  • Broken Access Control 1290
  • Privilege Escalation 1190
  • Remote Code Execution 1111
  • Authentication Bypass 835
  • Denial of Service 799

Published per day, last 14 days

7 Oct Critical Other 20 Oct

Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 469 of 695

  • 7.8 /10 High
    CVE-2026-90111 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in ip6mr_cache_report() caused by cloning a freed dst entry in IPv6 multicast routing, letting attackers cause memory corruption, exploit requires multicast packet triggering unresolved MFC lookup.

  • 9.4 /10 Critical
    CVE-2026-90110 No auth

    Linux Kernel - Side Channel

    Linux kernel inetpeer contains a side-channel vulnerability caused by deterministic RB-tree node comparison in inetpeer rate limiting, letting off-path attackers bypass IP-keyed ICMP rate limits by forcing eviction and reset of rate tokens, exploit requires network access to send packets.

  • 9.8 /10 Critical
    CVE-2026-90104 No auth

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in NFSv4.1 caused by uninitialized referring call lists in decode_cb_sequence_args, letting attackers cause denial of service via stale memory free, exploit requires NFSv4.1 usage.

  • 7.5 /10 High
    CVE-2026-90103

    Linux Kernel NFSv4.2 - Denial of Service

    Linux kernel NFSv4.2 contains a buffer exhaustion vulnerability caused by insufficient send buffer size in LAYOUTSTATS encoding, letting malicious NFS servers cause denial of service by exhausting buffer and locking resources, exploit requires malicious NFS server.

  • 7.5 /10 High
    CVE-2026-90102 No auth

    Linux Kernel - Broken Access Control

    Linux kernel contains a broken access control vulnerability in NFSv4/pnfs due to improper caching of data server versions, letting attackers cause null pointer dereference and connection issues, exploit requires use of flexfiles with mixed NFS versions on same address.

  • 7.8 /10 High
    CVE-2026-90093 Auth required

    Linux kernel Bluetooth L2CAP - Use After Free

    Linux kernel Bluetooth L2CAP contains a use-after-free vulnerability caused by unsafe access to chan->conn in get/setsockopt, letting local attackers cause kernel crashes, exploit requires local access.

  • 8.0 /10 High
    CVE-2026-90092 Auth required

    Linux Kernel Bluetooth L2CAP - Use After Free

    Linux kernel Bluetooth L2CAP contains a use-after-free caused by race conditions and improper socket state handling in l2cap_sock_new_connection_cb and l2cap_sock_teardown_cb, letting attackers cause memory corruption, exploit requires concurrent connection attempts.

  • 8.0 /10 High
    CVE-2026-90091 Auth required

    Linux Kernel Bluetooth L2CAP - Race Condition

    Linux kernel Bluetooth L2CAP contains a race condition caused by unsafe lockless read in l2cap_sock_cleanup_listen() accessing l2cap_pi(sk)->chan concurrently with l2cap_sock_kill(), letting attackers cause null pointer dereference and potential denial of service, exploit requires concurrent socket operations.

  • 7.1 /10 High
    CVE-2026-90089 No auth

    Linux kernel Bluetooth btnxpuart - Buffer Validation

    Linux kernel Bluetooth btnxpuart contains a buffer validation vulnerability caused by missing length checks on the firmware dump header in nxp_process_fw_dump(), letting attackers cause early dump termination or read beyond buffer, exploit requires crafted truncated frames.

  • 7.8 /10 High
    CVE-2026-90071 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in net/sched sch_teql due to failure to restore skb->dev on slave transmit failure, letting attackers cause kernel memory corruption, exploit requires crafted network packets.

  • 7.8 /10 High
    CVE-2026-90069 Auth required

    Linux Kernel - Out of Bounds Write

    Linux kernel contains a buffer overflow caused by insufficient allocation size in acomp_request_clone for async crypto requests, letting attackers cause out-of-bounds writes, exploit requires kernel-level access.

  • 7.5 /10 High
    CVE-2026-90067 No auth

    Linux kernel libceph - Denial of Service

    Linux kernel libceph contains a protocol validation vulnerability caused by improper validation of the Ceph messenger v2 banner payload length, letting remote clients trigger kernel warnings or crashes by sending a banner with payload_len less than 16 bytes, exploit requires network access to Ceph messenger service.

  • 7.1 /10 High
    CVE-2026-90062 Auth required

    Linux Kernel - Misconfiguration

    Linux kernel contains a misconfiguration in netfilter nf_tables offload sequence, causing inconsistent state between hardware and software rulesets, letting attackers potentially cause denial of service, exploit requires crafted network traffic.

  • 7.5 /10 High
    CVE-2026-90059 No auth

    Linux kernel net: stmmac - Denial of Service

    Linux kernel net: stmmac contains a misaligned memory access vulnerability caused by missing NET_IP_ALIGN in RX DMA offset, letting attackers cause kernel panic on ARM32 architectures, exploit requires network packet reception.

  • 7.8 /10 High
    CVE-2026-90057 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in slip_receive_buf() caused by concurrent execution of slip_hangup() and slip_close(), letting attackers cause memory corruption, exploit requires racing against tty hangup.