Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 561 of 677

  • 7.8 /10 High
    CVE-2026-84515 Auth required

    Apple macOS - Out of Bounds Write

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain an out-of-bounds write caused by insufficient bounds checking in SMB client, letting attackers cause kernel memory corruption by connecting to a malicious SMB server.

  • 8.8 /10 High
    CVE-2026-84512 No auth

    Apple macOS - Buffer Overflow

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain a buffer overflow caused by insufficient bounds checking when mounting disk images, letting attackers cause system termination or kernel memory corruption, exploit requires mounting a crafted disk image.

  • 7.8 /10 High
    CVE-2026-84511 No auth

    Apple - Denial of Service

    Apple iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 contain an out-of-bounds write caused by improper bounds checking in asset catalog processing, letting attackers cause denial of service via process termination, exploit requires processing a malicious asset catalog.

  • 7.8 /10 High
    CVE-2026-84507 Auth required

    Apple - Race Condition

    Apple iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27 contain a race condition caused by improper state handling, letting apps cause system termination or kernel memory corruption, exploit requires malicious app.

  • 7.8 /10 High
    CVE-2026-84506 Auth required

    Apple macOS - Use After Free

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain a use after free vulnerability caused by improper memory management, letting local apps execute arbitrary code with kernel privileges, exploit requires local app execution.

  • 7.8 /10 High
    CVE-2026-84505 Auth required

    Apple macOS - Privilege Escalation

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain a buffer overflow caused by insufficient bounds checking, letting local apps gain root privileges, exploit requires local app execution.

  • 7.8 /10 High
    CVE-2026-84497 No auth

    Apple - Buffer Overflow

    Apple iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, and visionOS 27 contain a buffer overflow caused by insufficient size validation when opening crafted files, letting attackers cause denial of service via process termination, exploit requires opening a malicious file.

  • 8.8 /10 High
    CVE-2026-82794 Auth required

    SolarView Compact - Command Injection

    SolarView Compact contains a command injection caused by improper input handling in Schedule Settings, letting logged-in attackers execute arbitrary OS commands.

  • 7.2 /10 High
    CVE-2026-82793 Auth required

    Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit - Unrestricted File Upload

    Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit contains an unrestricted file upload vulnerability caused by lack of file type restrictions, letting remote authenticated attackers execute arbitrary code.

  • 8.8 /10 High
    CVE-2026-82791 Auth required

    Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit - OS Command Injection

    Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit contains an OS command injection caused by improper neutralization of special elements in OS commands, letting logged-in attackers execute arbitrary OS commands.

  • 8.8 /10 High
    CVE-2026-82789 Auth required

    CONPROSYS HMI System - Expression Language Injection

    CONPROSYS HMI System contains an expression language injection caused by improper neutralization of directives in dynamically evaluated code, letting logged-in attackers execute arbitrary code.

  • 9.8 /10 Critical
    CVE-2026-82787 No auth

    CPSL-08P1EN - Authentication Bypass

    CPSL-08P1EN contains a broken authentication caused by missing authentication for critical functions, letting remote attackers operate the product without authentication, exploit requires no special conditions.

  • 8.8 /10 High
    CVE-2026-82780 Auth required

    CONPROSYS TM Series - Unrestricted File Upload

    CONPROSYS TM Series contains an unrestricted file upload vulnerability caused by lack of file type restrictions, letting remote authenticated attackers execute arbitrary commands, exploit requires authentication.

  • 8.8 /10 High
    CVE-2026-82779 Auth required

    CONPROSYS TM Series - Command Injection

    CONPROSYS TM Series contains an OS command injection caused by improper neutralization of special elements in OS commands, letting logged-in attackers execute arbitrary OS commands.

  • 8.8 /10 High
    CVE-2026-82777 Auth required

    CONPROSYS PAC Series - OS Command Injection

    CONPROSYS PAC Series contains an OS command injection caused by improper neutralization of special elements in OS commands, letting logged-in attackers execute arbitrary OS commands.