Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 500 of 681

  • 7.5 /10 High
    CVE-2026-91937 No auth

    Flowise - NoSQL Injection

    Flowise before 3.1.4 contains a NoSQL injection caused by unsanitized overrideConfig.sessionId parameter in MongoDBMemory node, letting unauthenticated attackers read other users' chat history via prediction API.

  • 8.3 /10 High
    CVE-2026-91935 Auth required

    Flowise - Open Redirect

    Flowise < 3.1.4 contains an open redirect caused by improper validation of baseURL parameters in chat-model nodes, letting authenticated users with specific permissions redirect requests to arbitrary hosts, exploit requires chatflows:create or chatflows:update permissions.

  • 8.8 /10 High
    CVE-2026-91934 Auth required

    Flowise - Broken Access Control

    Flowise < 3.1.4 contains a file write vulnerability caused by improper validation of file paths in the SQL Database Chain node when connecting to SQLite databases, letting authenticated attackers write arbitrary files, exploit requires authentication.

  • 7.1 /10 High
    CVE-2026-91933 Auth required

    Flowise - Broken Access Control

    Flowise < 3.1.4 contains a broken access control caused by missing workspace-level authorization checks in openai-realtime endpoints, letting authenticated users access and execute tools from other workspaces by supplying unscoped chatflowid.

  • 8.5 /10 High
    CVE-2026-91932 Auth required

    Flowise - Remote Code Execution

    Flowise < 3.1.4 contains a validation bypass vulnerability in MCP server configuration caused by unvalidated cwd parameter, letting authenticated attackers execute remote code by bypassing path validation with crafted args.

  • 8.5 /10 High
    CVE-2026-91931 Auth required

    Flowise - Remote Code Execution

    Flowise < 3.1.4 contains a remote code execution caused by improper validation of npx package names in the Custom MCP node's mcpServerConfig parameter, letting authenticated attackers execute arbitrary code on the server.

  • 7.5 /10 High
    CVE-2026-91930 Auth required

    Flowise - Broken Access Control

    Flowise < 3.1.4 contains a broken access control vulnerability caused by insufficient tenant isolation in organizationuser and workspace APIs, letting authenticated users gain administrative access by supplying arbitrary organization IDs.

  • 7.1 /10 High
    CVE-2026-91929 Auth required

    Flowise - Broken Access Control

    Flowise < 3.1.4 contains a broken access control caused by missing resource ownership verification in Enterprise endpoints, letting attackers with Enterprise access delete workspaces, modify roles, and abuse SSO secrets.

  • 8.8 /10 High
    CVE-2026-91925 Auth required

    Polyaxon - Remote Code Execution

    Polyaxon through 2.16.4 contains a remote code execution caused by unsandboxed Jinja2 environment rendering operation specification fields during server-side run preparation, letting authenticated users execute arbitrary code remotely, exploit requires user authentication.

  • 8.5 /10 High
    CVE-2026-91924 Auth required

    pgweb - Broken Access Control

    pgweb <= 0.17.0 contains a broken access control caused by unguarded POST /api/connect endpoint when connect-backend authorization is configured, letting attackers supply arbitrary database connection strings to access unauthorized databases and internal services, exploit requires no special privileges.

  • 7.7 /10 High
    CVE-2026-91923 Auth required

    KubeSphere - Server-Side Request Forgery

    KubeSphere through 4.1.3 contains a server-side request forgery caused by unvalidated URLs in the git credential verification endpoint, letting authenticated attackers reach internal services and exfiltrate credentials, exploit requires authentication.

  • 7.4 /10 High
    CVE-2026-91853 Auth required

    TOTOLINK X5000R - Command Injection

    TOTOLINK X5000R 9.1.0cu.2089_B20211224 contains a command injection caused by manipulation of the "filetype" argument in exportOvpn function of /cgi-bin/cstecgi.cgi, letting remote attackers execute OS commands, exploit requires no special privileges.

  • 7.3 /10 High
    CVE-2026-91848 No auth

    WuzhiCMS - SQL Injection

    WuzhiCMS <= 4.1.0 contains a SQL injection caused by manipulation of the "title" and "master_table" arguments in article::getDataOfJson function, letting remote attackers execute arbitrary SQL commands, exploit requires crafted request.

  • 8.8 /10 High
    CVE-2026-91771

    Weights & Biases wandb - Path Traversal

    Weights & Biases wandb < 0.29.0 contains a path traversal caused by improper validation of file names in File.download function, letting attackers controlling the backend write files outside intended directories, exploit requires attacker control of backend.

  • 7.5 /10 High
    CVE-2026-91752 No auth

    GNU libextractor - Buffer Overflow

    GNU libextractor < 1.15 contains a buffer overflow caused by sizing a variable-length stack array from attacker-controlled OLE2 stream data in process_star_office, letting attackers cause application crashes, exploit requires crafted malicious StarOffice documents.