Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10203
- Critical
- 1875
- CISA KEV
- 79
- Public PoC
- 367
Most common types
- Broken Access Control 1267
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 490 of 681
- 7.4 /10 HighCVE-2026-2380 Auth required
Arista EOS - Information Disclosure
Arista EOS contains an information disclosure vulnerability caused by unintentional logging of sensitive requests and responses in OpenConfig-related services, letting attackers access sensitive data, exploit requires access to logs.
- 8.8 /10 HighCVE-2026-20361 Auth required
Cisco Nexus Dashboard - SQL Injection
Cisco Nexus Dashboard contains SQL injection vulnerabilities caused by improper input sanitization, letting attackers execute arbitrary SQL commands, exploit requires crafted input.
- 8.8 /10 HighCVE-2026-20360
Cisco Nexus Dashboard - Information Disclosure
Cisco Nexus Dashboard contains information exposure and insecure handling vulnerabilities caused by multiple internal issues, letting attackers access sensitive information, exploit requires unspecified conditions.
- 8.6 /10 HighCVE-2026-20352 No auth
Cisco Identity Services Engine - Denial of Service
Cisco Identity Services Engine contains a denial of service vulnerability caused by improper handling of crafted RADIUS requests, letting unauthenticated remote attackers cause node unavailability, exploit requires sending crafted RADIUS requests.
- 8.8 /10 HighCVE-2026-20344 Auth required
Cisco Secure FMC Software - SQL Injection
Cisco Secure FMC Software contains a SQL injection caused by insufficient validation of user-supplied input in the web-based management interface, letting authenticated remote attackers with specific roles access or manipulate database data.
- 7.5 /10 HighCVE-2026-20343 No auth
Cisco Secure FMC Software - Authentication Bypass
Cisco Secure FMC Software contains an information disclosure and denial of service vulnerability caused by lack of authentication in a critical API, letting unauthenticated remote attackers download sensitive files and exhaust disk space, exploit requires no authentication.
- 7.7 /10 HighCVE-2026-20342 Auth required
Cisco Secure FMC Software - Path Traversal
Cisco Secure FMC Software contains a path traversal caused by unsanitized user input in the file download API, letting authenticated remote attackers download arbitrary files, exploit requires Security Analyst role or higher.
- 9.1 /10 CriticalCVE-2026-20341 Auth required
Cisco Secure FMC Software - Authentication Bypass
Cisco Secure FMC Software contains an insecure deserialization vulnerability in the sftunnel inter-device communication protocol, letting authenticated remote attackers gain root privileges by sending crafted RPCs, exploit requires valid administrative credentials.
- 8.8 /10 HighCVE-2026-20340 Auth required
Cisco Secure FMC Software - Remote Code Execution
Cisco Secure FMC Software contains an insecure deserialization vulnerability caused by unsecured deserialization of web-management user-controlled data, letting authenticated remote attackers execute arbitrary commands as root, exploit requires Security Analyst role or higher.
- 8.8 /10 HighCVE-2026-20336
CVE-2026-20336
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20336 are related to issues concerning improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664.
- 8.1 /10 HighCVE-2026-20335
Cisco Secure Firewall - Logic Vulnerability
Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software contain incorrect calculation vulnerabilities (CWE-682), letting attackers cause potential logic errors, exploit requires unspecified conditions.
- 8.4 /10 HighCVE-2026-20334
CVE-2026-20334
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20334 are related to issues concerning improper adherence to coding standards that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-710.
- 8.8 /10 HighCVE-2026-20333
CVE-2026-20333
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20333 are related to incorrect comparison conditions that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-697.
- 9.9 /10 CriticalCVE-2026-20332
Cisco Secure Firewall - Broken Access Control
Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software contain improper access control vulnerabilities caused by insufficient authorization checks, letting attackers bypass restrictions, exploit requires unspecified conditions.
- 9.6 /10 CriticalCVE-2026-20331
CVE-2026-20331
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20331 are related to the failure of protection mechanisms issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-693.