Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 571 of 677
- 7.5 /10 HighCVE-2026-28938 No auth
Apple iOS & iPadOS - Information Disclosure
Apple iOS and iPadOS 26.6 contain an information disclosure vulnerability caused by improper handling of sensitive data, letting apps fingerprint users, exploit requires app installation.
- 7.5 /10 HighCVE-2026-28935 No auth
Apple - Out of Bounds Read/Write
Apple iOS 26.6.1, iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, and watchOS 27 contain a memory corruption vulnerability caused by improper memory handling, letting apps cause system termination or kernel memory corruption, exploit requires malicious app execution.
- 8.1 /10 HighCVE-2026-25687 No auth
Zscaler Client Connector - Race Condition
Zscaler Client Connector contains a race condition in the ZPA tunnel handler causing heap corruption, letting attackers cause denial of service or execute arbitrary code, exploit requires no special conditions.
- 7.8 /10 HighCVE-2026-23789
Samsung Exynos - Use After Free
Samsung Mobile Processor and Wearable Processor Exynos series contain a double-free vulnerability caused by improper cleanup of dma_buf references in the Exynos MFC encoder driver, letting attackers cause kernel memory corruption and potentially execute arbitrary code, exploit requires kernel-level access.
- 7.1 /10 HighCVE-2026-20683 No auth
Apple - Authentication Bypass
Apple iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, and visionOS 27 contain an authentication bypass caused by improper state management in the Sign In With Apple flow, letting apps access user Apple Accounts, exploit requires app to use the Sign In With Apple authentication flow.
- 9.8 /10 CriticalCVE-2026-20353
CVE-2026-20353
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20353 are related to issues with improper control of a resource through its lifetime that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-664.
- 7.1 /10 HighCVE-2026-19816 Auth required
PackageKit - Broken Access Control
PackageKit with dnf5 backend contains a broken access control vulnerability caused by improper polkit authorization check skipping for SIMULATE flag in RepoRemove handler, letting unprivileged local users uninstall packages, exploit requires local access.
- 7.8 /10 HighCVE-2026-19624 Auth required
NetworkManager-l2tp - Command Injection
NetworkManager-l2tp contains a command injection caused by unescaped attacker-controlled VPN connection properties in ipsec.conf, letting local unprivileged users escalate privileges to root via crafted L2TP VPN profiles.
- 7.7 /10 HighCVE-2026-19499
GNU C Library - Buffer Overflow
GNU C Library 2.38 to 2.44 contains a buffer overflow caused by strfmon and strfmon_l functions writing past the end of the output buffer with right-justified width padding, letting attackers cause memory corruption, exploit requires specific application code paths with vulnerable buffer sizes.
- 7.5 /10 HighCVE-2026-19290 No auth
IBM Sterling File Gateway - Information Disclosure
IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6_1, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 contains an information disclosure vulnerability caused by improper access control, letting remote attackers obtain sensitive information, exploit requires no special privileges.
- 9.0 /10 CriticalCVE-2026-18119 Auth required
Concrete CMS - Stored XSS & Privilege Escalation
Concrete CMS < 9.5.3 contains a stored cross-site scripting caused by unsanitized custom style values in the Block Design dialog, letting editor-level users execute scripts in administrator sessions and escalate privileges, exploit requires editor access.
- 8.2 /10 HighCVE-2026-17467 No auth
IBM Cloud Pak for Data System - Weak Cryptography
IBM Cloud Pak for Data System Yosemite 1.0 3.0.5.2 contains weak cryptography caused by use of weak or deprecated cryptographic protocols, letting remote attackers obtain sensitive information, exploit requires network access.
- 7.8 /10 HighCVE-2026-17416 No auth
IBM App Connect Enterprise - Remote Code Execution
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 contain an insecure deserialization vulnerability caused by insecure deserialization, letting local attackers execute arbitrary code.
- 7.8 /10 HighCVE-2026-17156 No auth
IBM App Connect Enterprise - Remote Code Execution
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 contain an insecure deserialization vulnerability caused by insecure deserialization, letting local attackers execute arbitrary code.
- 7.8 /10 HighCVE-2026-17133 No auth
IBM App Connect Enterprise - Command Injection
IBM App Connect Enterprise 12.0.1.0 through 12.0.12.27 and 13.0.1.0 through 13.0.8.0 contain a command injection caused by improper neutralization of special elements in OS commands, letting local attackers execute arbitrary code.