Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 567 of 677
- 9.8 /10 CriticalCVE-2026-59178 No auth
ESPHome Device Builder Dashboard - Authentication Bypass
ESPHome Device Builder Dashboard prior to 1.0.12 contains an authentication bypass caused by removal of fallback environment variables for credentials, letting unauthenticated attackers access the dashboard remotely, exploit requires exposed dashboard port.
- 7.5 /10 HighCVE-2026-57579 No auth
Alchemy - Broken Access Control
Alchemy < 7.4.15, 8.0.15, 8.1.14, and 8.2.6 contains an information disclosure vulnerability caused by lack of authorization in the GET /api/pages/nested endpoint, letting unauthenticated attackers retrieve restricted and unpublished page metadata and content, exploit requires no authentication.
- 9.1 /10 CriticalCVE-2026-57145
PraisonAI - Path Traversal
PraisonAI < 4.6.62 contains a path traversal vulnerability caused by lack of traversal rejection and symlink resolution in file operations in multiedit.py, letting prompt-influenced agents read or overwrite files, exploit requires LLM-controlled filepath input.
- 8.2 /10 HighCVE-2026-57132 No auth
PraisonAI - Authentication Bypass
PraisonAI < 4.6.62 contains an authentication bypass caused by disabled PRAISONAI_CALL_AUTH allowing unauthenticated requests to /api/v1/agents/{id}/invoke, letting attackers invoke registered agents and access private context without authentication.
- 9.8 /10 CriticalCVE-2026-57131 No auth
PraisonAI - Broken Access Control
PraisonAI < 4.6.58 contains a broken access control caused by missing authentication and per-job authorization in praisonai.jobs.server.create_app mounting praisonai.jobs.router.create_router under /api/v1/runs, letting network attackers list, read, cancel, delete jobs, and execute unauthorized agents, exploit requires network access.
- 8.1 /10 HighCVE-2026-57130 Auth required
PraisonAI praisonaiagents - Injection
PraisonAI praisonaiagents < 1.6.59 contains an IMAP injection caused by direct interpolation of LLM-controlled email fields into IMAP SEARCH criteria, letting agents with email credentials access, modify, delete mailbox data, or disrupt connections, exploit requires configured email credentials.
- 7.5 /10 HighCVE-2026-57129 No auth
PraisonAI praisonaiagents - Information Disclosure
PraisonAI praisonaiagents < 1.6.59 contains a file read vulnerability caused by lack of traversal, symlink, or workspace-boundary validation in MentionsParser._process_file_mention, letting attackers read arbitrary files accessible to the process, exploit requires crafted prompt input.
- 9.8 /10 CriticalCVE-2026-57127
PraisonAI - Authentication Bypass
PraisonAI < 4.6.58 contains an authentication bypass caused by APIKeyAuthMiddleware or JWTAuthMiddleware forwarding requests without required keys, letting unauthenticated clients access recipe execution and connected tools, exploit requires missing environment keys.
- 8.5 /10 HighCVE-2026-57126 Auth required
PraisonAI praisonaiagents - Server Side Request Forgery
PraisonAI praisonaiagents < 1.6.58 contains a server side request forgery caused by improper hostname resolution in SpiderTools._validate_url, letting attackers bypass SSRF policy and access internal resources, exploit requires attacker-controlled hostname resolving to restricted IPs.
- 9.8 /10 CriticalCVE-2026-57125 No auth
PraisonAI - Command Injection
PraisonAI < 4.6.59 and praisonaiagents < 1.6.59 contain a command injection caused by unauthenticated POST /api/v1/runs accepting attacker-controlled agent_yaml and bypassing approval checks, letting remote attackers execute arbitrary OS commands without credentials or interaction.
- 9.8 /10 CriticalCVE-2026-57124
PraisonAI - Command Injection
PraisonAI < 4.6.59 contains a command injection caused by unauthenticated POST /api/mcp/connect accepting caller-controlled command and args, letting unauthenticated remote attackers execute commands as the UI service account, exploit requires network access to the UI host.
- 9.8 /10 CriticalCVE-2026-57123 No auth
PraisonAI praisonaiagents - Broken Access Control
PraisonAI praisonaiagents < 1.6.59 contains a broken access control caused by missing authentication and origin-validation in ToolsMCPServer routes, letting any reachable client invoke registered tools, exploit requires network access.
- 8.6 /10 HighCVE-2026-57122
PraisonAI - Authentication Bypass
PraisonAI < 4.6.59 contains a broken authentication caused by missing HMAC signature verification in WhatsApp and Linear bot webhook handlers, letting remote unauthenticated clients forge messages and disrupt bot processing, exploit requires access to webhook route.
- 7.5 /10 HighCVE-2026-57119 No auth
PraisonAI - Path Traversal
PraisonAI < 4.6.59 contains a path traversal caused by lack of workspace boundary checks in the unauthenticated Jobs API at POST /api/v1/runs, letting remote attackers access sensitive files, exploit requires no authentication.
- 7.3 /10 HighCVE-2026-56839 Auth required
PraisonAI - Path Traversal
PraisonAI < 4.6.59 contains a path traversal caused by uninitialized workspace root in CODE_TOOLS wrappers, letting attackers read and modify files outside intended directories, exploit requires application exposing code helpers before workspace set.