Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 584 of 677
- 9.8 /10 CriticalCVE-2026-89658 No auth
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in NFSD during NFSv4.0 revoked-state cleanup caused by improper client reference handling, letting attackers cause memory corruption, exploit requires race condition during client teardown.
- 7.5 /10 HighCVE-2026-89657 No auth
Linux Kernel libceph - Denial of Service
Linux kernel libceph contains a denial of service caused by improper validation of OSD extent maps in osd_sparse_read(), letting malicious authenticated Ceph OSD peers crash kernel Ceph clients via malformed sparse-read replies, exploit requires authenticated malicious OSD peer.
- 9.8 /10 CriticalCVE-2026-89656
Linux kernel libceph - Out of Bounds Write
Linux kernel libceph contains an out-of-bounds write caused by mismatched CRUSH bucket ids in crush_decode(), letting attackers trigger memory corruption, exploit requires a malformed CRUSH map.
- 9.8 /10 CriticalCVE-2026-89655 No auth
Linux Kernel ceph - Use After Free
Linux kernel ceph contains a use-after-free vulnerability in __kick_flushing_caps() caused by accessing freed cf entries during list iteration, letting attackers cause memory corruption or denial of service, exploit requires race condition timing.
- 9.8 /10 CriticalCVE-2026-89654
Linux kernel ceph - Use After Free
Linux kernel ceph contains a use-after-free vulnerability in check_new_map() caused by missing reference counting on session objects during mutex unlock, letting concurrent threads access freed memory, exploit requires concurrent session teardown.
- 9.8 /10 CriticalCVE-2026-89653 No auth
Linux Kernel - Out of Bounds Read/Write
Linux kernel contains a buffer overflow caused by unchecked export_targets ranks in ceph mdsmap decode, letting attackers cause memory corruption by providing ranks >= CEPH_MAX_MDS, exploit requires crafted mdsmap data.
- 9.8 /10 CriticalCVE-2026-89652
Linux kernel Ceph - Buffer Overflow
Linux kernel Ceph contains a buffer overflow caused by unchecked dname_len in ceph_get_name and __get_snap_name functions, letting malicious or compromised Ceph MDS cause out-of-bounds write, exploit requires CephFS mount re-exported over NFS.
- 9.8 /10 CriticalCVE-2026-89651 No auth
Linux Kernel ceph - Out-of-Bounds Read
Linux kernel contains an out-of-bounds read vulnerability in ceph handle_session() due to missing bounds checks on MDSCapAuth path and fs_name decoding, letting malicious MDS crash the client during session setup without user interaction.
- 9.1 /10 CriticalCVE-2026-89650
Linux Kernel Ceph - Out-of-Bounds Read
Linux kernel Ceph component (info_v 2 and 3) contains an out-of-bounds read caused by missing bounds check on num_export_targets in ceph_mdsmap_decode(), letting malicious or compromised Ceph monitors trigger kernel memory read, exploit requires a malicious or compromised Ceph monitor or on-path attacker on unsigned messenger session.
- 9.1 /10 CriticalCVE-2026-89649 No auth
Linux kernel CephFS - Information Disclosure
Linux kernel CephFS contains an information disclosure vulnerability caused by missing bounds check on the last xattr value length in __build_xattrs(), letting a malicious metadata server disclose adjacent kernel heap bytes to local users via getxattr(2), exploit requires local user access.
- 7.5 /10 HighCVE-2026-89648
Linux Kernel Ceph - Denial of Service
Linux kernel Ceph contains a denial of service caused by unbounded delegated inode count handling in ceph_parse_deleg_inos(), letting a malicious or compromised MDS cause resource exhaustion, exploit requires attacker to control MDS.
- 7.5 /10 HighCVE-2026-89647 No auth
Linux Kernel - Denial of Service
Linux kernel contains a denial of service caused by a busy loop in ceph_trim_dentries() due to repeated re-queuing when no progress is possible, letting attackers cause high CPU usage, exploit requires no special privileges.
- 7.8 /10 HighCVE-2026-89646 Auth required
Linux Kernel Ceph - Broken Access Control
Linux kernel contains a broken access control vulnerability in Ceph where leaked inode references occur on writeback abort during umount, caused by failure to release wrbuffer claims, letting attackers cause inode eviction failure, exploit requires umount operation.
- 9.8 /10 CriticalCVE-2026-89643
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in audit_del_rule() caused by improper handling of tree references during fsnotify rule autoremove, letting attackers cause system instability or denial of service, exploit requires triggering fsnotify autoremove.
- 7.8 /10 HighCVE-2026-89641 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in cifs_file_set_size() caused by improper handling of tcon after cifsFileInfo_put(), letting attackers cause memory corruption or denial of service, exploit requires writable file handle.