Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10203
- Critical
- 1875
- CISA KEV
- 79
- Public PoC
- 367
Most common types
- Broken Access Control 1267
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 491 of 681
- 9.9 /10 CriticalCVE-2026-20330
CVE-2026-20330
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20330 are related to improper neutralization issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-707.
- 9.9 /10 CriticalCVE-2026-20329 PoC publicAuth required
Cisco Secure Firewall - Denial of Service
Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software, and Cisco Secure Firewall Management Center Software contain an improper handling of exceptional conditions vulnerability (CWE-703), letting attackers cause potential denial of service or unexpected behavior, exploit requires triggering exceptional conditions.
- 9.8 /10 CriticalCVE-2026-20326
Cisco Nexus Dashboard - Authentication Bypass
Cisco Nexus Dashboard contains missing authentication for critical functions caused by lack of proper access controls, letting attackers perform unauthorized actions, exploit requires access to the system.
- 9.9 /10 CriticalCVE-2026-20325 Auth required
Cisco Nexus Dashboard - Command Injection
Cisco Nexus Dashboard contains a command injection vulnerability caused by improper neutralization of special elements in command issuance, letting attackers execute arbitrary commands, exploit requires crafted input.
- 9.9 /10 CriticalCVE-2026-20324 Auth required
Cisco Secure Firewall Management Center - Command Injection
Cisco Secure Firewall Management Center contains a command injection caused by improper permissions in sftunnel inter-device communication protocol, letting authenticated remote attackers execute arbitrary commands as root, exploit requires valid user credentials.
- 8.3 /10 HighCVE-2026-20323
Cisco Secure FMC & FTD Software - Privilege Escalation
Cisco Secure FMC Software and Cisco Secure FTD Software contain a privilege escalation caused by improper TLS certificate management in the sftunnel inter-device communication protocol, letting unauthenticated adjacent attackers impersonate peer devices and gain manager-level (root) access, exploit requires sftunnel connection to be down or disrupted.
- 9.9 /10 CriticalCVE-2026-20322 Auth required
Cisco Nexus Dashboard - Broken Access Control
Cisco Nexus Dashboard contains improper access control vulnerabilities caused by insufficient authorization checks, letting attackers gain unauthorized access, exploit requires network access.
- 9.9 /10 CriticalCVE-2026-20307 Auth required
Cisco ISE - Remote Code Execution & Privilege Escalation
Cisco ISE contains an insecure deserialization vulnerability caused by processing user-supplied Java byte streams in the web-based management interface, letting authenticated remote attackers execute arbitrary commands and elevate privileges, exploit requires low-privileged administrative credentials.
- 9.1 /10 CriticalCVE-2026-20306 Auth required
Cisco ISE - Command Injection & Privilege Escalation
Cisco ISE and ISE-PIC contain a command injection caused by improper validation of user-supplied input in the REST API, letting authenticated remote attackers execute arbitrary code and escalate privileges to root, exploit requires valid administrative credentials.
- 9.1 /10 CriticalCVE-2026-20305 Auth required
Cisco ISE - Command Injection & Privilege Escalation
Cisco ISE and ISE-PIC contain a command injection caused by improper validation of user-supplied input in diagnostic tools, letting authenticated remote attackers execute arbitrary code and elevate privileges to root, exploit requires administrative credentials.
- 7.1 /10 HighCVE-2026-20300 Auth required
Cisco ISE - SQL Injection
Cisco ISE contains a SQL injection caused by improper validation of user-supplied input, letting authenticated remote attackers with low-privileged administrative credentials read or modify database data, exploit requires low-privileged admin access.
- 8.6 /10 HighCVE-2026-20295 No auth
Cisco Secure FMC & FTD Software - Denial of Service
Cisco Secure FMC Software and Cisco Secure FTD Software contain a denial of service vulnerability caused by improper memory management during sftunnel TLS connection setup, letting unauthenticated remote attackers exhaust device memory by sending crafted TLS frames.
- 9.1 /10 CriticalCVE-2026-20284 Auth required
Cisco ISE - SQL Injection
Cisco ISE contains a SQL injection caused by insufficient validation of user input in the SXP REST API, letting authenticated remote attackers view or modify database data and cause DoS, exploit requires valid admin credentials and SXP service enabled.
- 8.6 /10 HighCVE-2026-20250 No auth
Cisco Secure Firewall ASA & FTD - Denial of Service
Cisco Secure Firewall ASA and FTD Software for 3100 and 4200 Series contains a denial of service vulnerability caused by improper resource management in DTLS message handling, letting unauthenticated remote attackers cause device reloads, exploit requires crafted DTLS traffic.
- 8.6 /10 HighCVE-2026-20249 No auth
Cisco Secure Firewall ASA & FTD Software - Denial of Service
Cisco Secure Firewall ASA and FTD Software contain a denial of service vulnerability caused by a logic error in the certificate authentication phase of IKEv2, letting unauthenticated remote attackers crash the IKEv2 process via crafted certificates.