Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 579 of 677
- 8.1 /10 HighCVE-2026-90456 No auth
Inventory-Management Component - Authentication Bypass
An inventory-management component contains a broken authentication caused by a fixed, publicly-known administrative password in the example environment-configuration file, letting attackers access the administrative interface, exploit requires deployment without running setup routine.
- 8.8 /10 HighCVE-2026-90444 Auth required
Generic File-Transfer Interface - Command Injection
A file-transfer interface requiring valid credentials contains a command injection caused by insufficient sanitization of attacker-controlled filenames, letting authenticated attackers execute arbitrary OS commands with process privileges.
- 7.8 /10 HighCVE-2026-89771 Auth required
Linux Kernel - Race Condition
Linux kernel contains a race condition in ring buffer subbuffer resizing caused by concurrent access to trace_buffer subbuf_size, letting attackers cause data corruption or denial of service, exploit requires concurrent ring buffer access.
- 7.4 /10 HighCVE-2026-89769 No auth
Linux kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by an IRQ leak on cpuhp_setup_state error path in clocksource/drivers/nxp-pit, letting attackers potentially trigger use-after-free via IRQ firing, exploit requires kernel IRQ handling.
- 7.8 /10 HighCVE-2026-89767 Auth required
Linux Kernel overlayfs - Denial of Service
Linux kernel overlayfs contains a double end_creating() call caused by casefold-mismatch in ovl_create_real(), letting unprivileged users cause a deadlock by unlocking a lock twice during directory creation, exploit requires unprivileged user access.
- 7.8 /10 HighCVE-2026-89764
Linux Kernel - Use After Free
Linux kernel contains a use-after-free caused by a race condition between concurrent revokers in rust devres component, letting attackers cause memory corruption, exploit requires concurrent revocation attempts.
- 7.8 /10 HighCVE-2026-89763 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by improper TPM teardown ordering in trusted_tpm_exit(), letting local attackers cause memory corruption or kernel crash, exploit requires local code execution.
- 7.8 /10 HighCVE-2026-89762
Linux Kernel AppArmor - Use After Free
Linux kernel AppArmor contains a use-after-free vulnerability caused by improper cred replacement in begin_current_label_crit_section(), letting attackers cause UAF via out-of-sync credentials during LSM hooks, exploit requires specific task cred override conditions.
- 7.8 /10 HighCVE-2026-89761 Auth required
Linux Kernel AppArmor - Out of Bounds Write
Linux kernel contains an out-of-bounds write vulnerability in AppArmor caused by improper null termination of label vectors in aa_vec_unique(), letting unprivileged attackers cause memory corruption via crafted label names, exploit requires loaded policy and access to /proc/self/attr/apparmor/current or securityfs .access file.
- 7.8 /10 HighCVE-2026-89760 Auth required
Linux Kernel - Memory Corruption
Linux kernel contains a memory corruption vulnerability caused by improper freeing of hibernation slots in the swap cache, letting attackers cause silent memory corruption, crashes, or data instability, exploit requires hibernation image preparation.
- 7.8 /10 HighCVE-2026-89758
Linux Kernel - Denial of Service
Linux kernel contains a memory management vulnerability caused by improper handling of non-present device-private PMDs in queue_folios_pmd(), letting attackers trigger kernel oops or VM_BUG_ON via HMM-based GPU driver migration, exploit requires GPU driver migration of anonymous THP folio.
- 7.8 /10 HighCVE-2026-89755 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in mm/migrate_device caused by stale mapping usage after freeing swapcache in __migrate_device_pages, letting attackers trigger folio reference count bugs, exploit requires kernel-level access.
- 7.8 /10 HighCVE-2026-89754 Auth required
Linux Kernel - Out-of-Bounds Write
Linux kernel contains an out-of-bounds write caused by improper handling of walk->action in mm/pagewalk during walk_pmd_range(), letting local attackers trigger memory corruption, exploit requires local code execution.
- 7.8 /10 HighCVE-2026-89750 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free caused by improper reference handling of user_event_mm during fork duplication in tracing/user_events, letting attackers trigger memory corruption, exploit requires ability to fork processes.
- 7.8 /10 HighCVE-2026-89748 Auth required
Linux Kernel - Race Condition
Linux kernel contains a race condition in simple ring buffer reader swap caused by incorrect retry counter handling in simple_ring_buffer_swap_reader_page(), letting attackers cause ring buffer corruption, exploit requires kernel tracing enabled.