Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 492 of 681

  • 7.5 /10 High
    CVE-2026-20247 No auth

    Cisco ISE - SQL Injection

    Cisco ISE contains a SQL injection caused by improper validation of user-supplied input, letting unauthenticated remote attackers modify data in the underlying database, exploit requires sending crafted requests.

  • 9.8 /10 Critical
    CVE-2026-20242 No auth

    Cisco Secure Firewall Management Center - Remote Code Execution & Privilege Escalation

    Cisco Secure Firewall Management Center contains an insecure deserialization vulnerability caused by processing user-supplied Java byte streams from hosts in the external database access list, letting unauthenticated remote attackers execute arbitrary commands as root, exploit requires attacker control of a host in the external database access list.

  • 9.1 /10 Critical
    CVE-2026-20237

    CVE-2026-20237

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20237 are related to improper input validation issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-20.

  • 9.9 /10 Critical
    CVE-2026-20234

    Cisco Identity Services Engine - Hardcoded Credentials

    Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector contain insufficiently protected credentials vulnerabilities caused by weak credential protection, letting attackers potentially access sensitive credentials, exploit requires internal access.

  • 7.4 /10 High
    CVE-2026-20222 No auth

    Cisco Secure Firewall ASA & FTD - Denial of Service

    Cisco Secure Firewall ASA and FTD Software contain a denial of service vulnerability caused by improper resource management in EIGRP update message handling, letting unauthenticated adjacent attackers cause device reloads by sending crafted updates.

  • 9.1 /10 Critical
    CVE-2026-20211 Auth required

    Cisco ISE - Remote Code Execution & Denial of Service

    Cisco ISE contains an insecure deserialization vulnerability caused by processing crafted serialized Java objects, letting authenticated remote attackers with high-privileged admin credentials execute arbitrary commands and cause DoS.

  • 9.1 /10 Critical
    CVE-2026-20194

    CVE-2026-20194

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20194 are related to incorrect resource transfer between spheres that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-669.

  • 10.0 /10 Critical
    CVE-2026-20192 No auth

    Cisco Identity Services Engine - Broken Access Control

    Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector contain improper access control vulnerabilities caused by insufficient authorization checks, letting attackers gain unauthorized access, exploit requires no special conditions.

  • 9.1 /10 Critical
    CVE-2026-20176 Auth required

    Cisco ISE - Command Injection

    Cisco ISE contains a command injection caused by insufficient validation of user-supplied input in HTTP requests, letting authenticated high-privileged administrators execute arbitrary OS commands and cause DoS, exploit requires high-privileged admin credentials.

  • 8.6 /10 High
    CVE-2026-20154 No auth

    Cisco Secure Firewall ASA & FTD Software - Denial of Service

    Cisco Secure Firewall ASA and FTD Software contain a denial of service vulnerability caused by improper rate limiting of syslog message 419002, letting unauthenticated remote attackers cause high CPU utilization via TCP SYN flood.

  • 8.6 /10 High
    CVE-2026-20135 No auth

    Cisco Secure Firewall Threat Defense - Denial of Service

    Cisco Secure Firewall Threat Defense Software contains a denial of service vulnerability caused by improper buffer management in TLS 1.3 implementation, letting unauthenticated remote attackers crash the LINA process and reload the device, exploit requires sending crafted TLS 1.3 packets.

  • 10.0 /10 Critical
    CVE-2026-20130

    CVE-2026-20130

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC), engineering teams have conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20130 are related to improper neutralization of special elements issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-74.

  • 7.5 /10 High
    CVE-2026-19667

    BIND 9 - Denial of Service

    BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1 contain a denial of service caused by a flaw in handling negative cache entries from attacker-controlled authoritative servers producing 65536 byte negative answers, letting remote attackers cause named to abort, exploit requires attacker-controlled authoritative DNS server.

  • 7.5 /10 High
    CVE-2026-19666 No auth

    BIND 9 - Denial of Service

    BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1 contain a denial of service caused by malformed authoritative DNS64 responses, letting remote attackers crash the named resolver process, exploit requires DNS64 configuration.

  • 7.2 /10 High
    CVE-2026-18595 No auth

    WP-Lister Lite for eBay - Stored XSS

    WP-Lister Lite for eBay WordPress plugin <= 3.8.9 contains a stored cross-site scripting caused by insufficient input sanitization and output escaping in AJAX Cron Handler request parameter, letting unauthenticated attackers inject scripts executed on user page access.