Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 545 of 677
- 9.8 /10 CriticalCVE-2026-62379 No auth
Open Access Management (OpenAM) - Remote Code Execution
Open Access Management (OpenAM) < 16.1.2 contains a remote code execution caused by unsafe deserialization and arbitrary class instantiation in the pre-authentication /authservice PLL endpoint, letting unauthenticated attackers execute code remotely.
- 8.1 /10 HighCVE-2026-61668
DIRAC - Remote Code Execution
DIRAC < 8.0.79, < 9.0.22, and < 9.1.10 contains a remote code execution caused by lack of TLS certificate verification in pilotWrapperScript during pilot.tar and checksum download, letting attackers with network interception capabilities execute arbitrary code with pilot proxy credentials, exploit requires network traffic interception or redirection.
- 9.9 /10 CriticalCVE-2026-61667 Auth required
DIRAC - Command Injection
DIRAC < 8.0.79, 9.0.22, 9.1.10 contains a command injection caused by unparameterized SQL query in DatasetManager.py __checkDataset, letting authenticated attackers execute arbitrary commands, exploit requires authentication.
- 9.6 /10 CriticalCVE-2026-61568 No auth
@zereight/mcp-gitlab - DNS Rebinding
@zereight/mcp-gitlab < 2.1.30 contains a dns rebinding vulnerability caused by lack of effective Host or Origin allowlist in the Streamable HTTP MCP endpoint, letting attackers route browser requests to local MCP listener with attacker-controlled headers, exploit requires victim to visit malicious web page.
- 9.8 /10 CriticalCVE-2026-61560 No auth
@zereight/mcp-gitlab - Information Disclosure
@zereight/mcp-gitlab < 2.1.27 contains an information disclosure caused by unsanitized file_path parameter in upload_markdown tool with SSE=true, letting unauthenticated network attackers read arbitrary files and steal GitLab tokens, exploit requires default SSE transport mode enabled.
- 9.6 /10 CriticalCVE-2026-61559 Auth required
@zereight/mcp-gitlab - Information Disclosure
@zereight/mcp-gitlab < 2.1.27 contains an information disclosure caused by lack of hostname restriction on X-GitLab-API-URL header, letting attackers receiving victim's Private-Token via attacker-controlled API URL, exploit requires network access to send crafted requests.
- 7.5 /10 HighCVE-2026-61554 No auth
emp3r0r - Denial of Service
emp3r0r < 4.2.5 contains a denial of service caused by acceptance of attacker-controlled HTTP polling sessions before CBOR MsgAuth authentication, letting remote unauthenticated attackers consume server resources, exploit requires no authentication.
- 8.5 /10 HighCVE-2026-59973 Auth required
FrontMCP - Server Side Request Forgery
FrontMCP mcp-from-openapi 2.3.0 to 2.5.0 and frontmcp & @frontmcp/adapters 1.2.1 to 1.5.0 contain a server-side request forgery caused by improper validation of external $ref URLs in OpenAPI specs, letting authenticated users access internal network services, exploit requires authenticated user able to import or configure OpenAPI specs.
- 10.0 /10 CriticalCVE-2026-59971 No auth
MySQL MCP Server - DNS Rebinding
MySQL MCP Server < 0.4.2 contains a DNS rebinding and unauthenticated access vulnerability caused by insecure SseServerTransport configuration and lack of authentication on key routes, letting network attackers disclose and modify database contents and potentially execute code if FILE privileges exist, exploit requires network access and victim browser interaction.
- 7.1 /10 HighCVE-2026-59965 Auth required
Payload Plugins - Broken Access Control
Payload Plugins 0.7.0 contains a broken access control vulnerability caused by missing overrideAccess checks in alt-text plugin endpoints, letting authenticated low-privilege users read and modify protected upload documents, exploit requires authentication.
- 8.8 /10 HighCVE-2026-59160 No auth
Yeger turbo-graph - Command Injection
Yeger turbo-graph < 2.8.9 contains a command injection caused by unauthenticated /api/run handler passing attacker-controlled task names to spawn(), letting adjacent-network attackers execute arbitrary tasks with developer OS user privileges, exploit requires network access to the server.
- 7.8 /10 HighCVE-2026-58766 Auth required
arm-smmu-v3 - Privilege Escalation
arm-smmu-v3.c contains a privilege escalation caused by a logic error in multiple functions, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.
- 7.8 /10 HighCVE-2026-58744 Auth required
Unknown - Privilege Escalation
Unknown product contains a privilege escalation caused by improper input validation in multiple locations, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.
- 7.0 /10 HighCVE-2026-58734 Auth required
Google mba_poll - Privilege Escalation
Google mba_poll contains an out-of-bounds write caused by a race condition in google_mba_recv_msg, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.
- 7.0 /10 HighCVE-2026-58728 Auth required
ARM64_TLBI - Race Condition
ARM64_TLBI in mmu.h contains a race condition causing memory corruption, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.