Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 48 of 677
- 8.8 /10 HighCVE-2026-97747 No auth
Microsoft Office Excel - Remote Code Execution
Microsoft Office Excel contains a use after free vulnerability that allows unauthorized attackers to execute code remotely over a network, exploit requires network access.
- 8.8 /10 HighCVE-2026-97746 No auth
Microsoft Office Excel - Remote Code Execution
Microsoft Office Excel contains an integer underflow caused by improper handling of integer values, letting unauthorized attackers execute code remotely, exploit requires network access.
- 8.8 /10 HighCVE-2026-97745 No auth
Microsoft Office Excel - Remote Code Execution
Microsoft Office Excel contains a use after free vulnerability allowing unauthorized attackers to execute code remotely over a network, exploit requires network access.
- 8.8 /10 HighCVE-2026-97742 No auth
Microsoft Office Excel - Buffer Overflow
Microsoft Office Excel contains a stack-based buffer overflow allowing unauthorized attackers to execute code remotely over a network, exploit requires network access.
- 8.8 /10 HighCVE-2026-97741 No auth
Microsoft Office Excel - Remote Code Execution
Microsoft Office Excel contains a heap-based buffer overflow caused by improper memory handling, letting unauthorized attackers execute code remotely, exploit requires network access.
- 8.8 /10 HighCVE-2026-97739 No auth
Microsoft Office Excel - Remote Code Execution
Microsoft Office Excel contains an integer underflow caused by improper handling of integer values, letting unauthorized attackers execute code remotely, exploit requires network access.
- 8.8 /10 HighCVE-2026-97738 No auth
Microsoft Office Excel - Remote Code Execution
Microsoft Office Excel contains a use after free vulnerability allowing unauthorized attackers to execute code remotely over a network, exploit requires network access.
- 9.9 /10 CriticalCVE-2026-97381 Auth required
Legacy Update - Broken Access Control
Legacy Update 1.12.0 through 1.13.1 contains a broken access control caused by an origin validation error in the IsPermitted method of its ActiveX control, letting attackers via malicious IE webpages install updates, enumerate system info, or reboot without user consent, exploit requires user to visit a malicious webpage in Internet Explorer.
- 8.7 /10 HighCVE-2026-97334 No auth
Commvault - Denial of Service
Commvault network messaging layer contains a denial of service caused by improper handling of highly compressed data, letting attackers affect service availability, exploit requires network access.
- 7.1 /10 HighCVE-2026-97333 Auth required
QAPI - Buffer Overflow
QAPI contains a stack-based buffer overflow causing denial of service by affecting service availability, letting attackers disrupt services, exploit requires no special privileges.
- 7.8 /10 HighCVE-2026-97312 No auth
Photoshop Desktop - Remote Code Execution
Photoshop Desktop contains an out-of-bounds write vulnerability caused by improper memory handling, letting attackers execute arbitrary code as the current user, exploit requires victim to open a malicious file.
- 10.0 /10 CriticalCVE-2026-97229 PoC publicNo auth
GitLab CE/EE - Remote Code Execution
GitLab CE/EE >= 19.2 < 19.2.8, >= 19.3 < 19.3.5, and >= 19.4 < 19.4.2 contain a remote code execution caused by insufficient regular expression validation in CI/CD configuration, letting unauthenticated users execute arbitrary code remotely, exploit requires crafted regex in CI/CD config.
- 8.8 /10 HighCVE-2026-97017 No auth
Microsoft Office Excel - Remote Code Execution
Microsoft Office Excel contains a use after free vulnerability that allows unauthorized attackers to execute code remotely over a network, exploit requires network access.
- 9.8 /10 CriticalCVE-2026-97016 No auth
Microsoft Office Outlook - Remote Code Execution
Microsoft Office Outlook contains a heap-based buffer overflow caused by improper memory handling, letting unauthorized attackers execute code remotely, exploit requires network access.
- 8.8 /10 HighCVE-2026-97012 No auth
Microsoft Office Outlook - Remote Code Execution
Microsoft Office Outlook contains a stack-based buffer overflow caused by improper handling of input, letting unauthorized attackers execute code remotely, exploit requires network access.