Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 585 of 677
- 7.1 /10 HighCVE-2026-89640 Auth required
Linux Kernel - Data Tampering & Denial of Service
Linux kernel contains a vulnerability in cifs_remap_file_range() caused by loff_t underflow when len is 0, letting attackers cause file range corruption, exploit requires crafted FSCTL_DUPLICATE_EXTENTS_TO_FILE request.
- 7.1 /10 HighCVE-2026-89639 Auth required
Linux Kernel - Cache Invalidation Issue in CIFS Truncate
Linux kernel contains a cache invalidation issue in cifs_do_truncate() caused by improper cache handling without i_rwsem, letting attackers cause stale cached data to be served, exploit requires file truncation with O_TRUNC flag.
- 7.8 /10 HighCVE-2026-89638 Auth required
Linux Kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability caused by improper clearing of setuid/setgid bits on write with cifsacl/modefromsid/posix extensions, letting attackers retain setuid/setgid bits unexpectedly, exploit requires usage of affected CIFS mount options.
- 9.8 /10 CriticalCVE-2026-89637 No auth
Linux kernel smb client - Use After Free
Linux kernel smb client contains a use-after-free and buffer leak caused by improper handling of malformed secondary TRANSACT2 responses in cifs_check_trans2(), letting attackers cause memory corruption, exploit requires crafted malformed secondary T2 response.
- 9.8 /10 CriticalCVE-2026-89636 No auth
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by ce->tgthint pointing to freed cache_dfs_tgt structures in smb client free_tgts(), letting attackers cause memory corruption or denial of service, exploit requires triggering smb client target list free.
- 9.8 /10 CriticalCVE-2026-89635 No auth
Linux Kernel ksmbd - Use After Free
Linux kernel ksmbd contains a use-after-free vulnerability caused by rebinding oplocks of all detached durable handles on an inode to a reconnecting session instead of only the file's own, letting authenticated attackers cause kernel memory corruption during durable reconnects, exploit requires multiple sessions with durable handles on the same file.
- 9.1 /10 CriticalCVE-2026-89634 No auth
Linux Kernel smb client - Out of Bounds Read & Denial of Service
Linux kernel contains a buffer overflow caused by an ALIGN() overflow in smb client symlink_data() error context loop, letting attackers cause out-of-bounds read or infinite loop, exploit requires crafted SMB response.
- 9.8 /10 CriticalCVE-2026-89633 No auth
Linux Kernel smb client - Out-of-Bounds Read/Write
Linux kernel smb client contains an out-of-bounds read/write caused by unvalidated DataOffset in coalesce_t2(), letting attackers cause memory corruption or crash, exploit requires crafted SMB packets.
- 8.2 /10 HighCVE-2026-89632 No auth
Linux Kernel smb client - Use-After-Check
Linux kernel contains a use-after-check vulnerability in smb client reparse_buf_ptr() caused by reading ReparseDataLength before validating buffer length, letting remote attackers cause memory corruption, exploit requires crafted server response.
- 9.1 /10 CriticalCVE-2026-89631 No auth
Linux kernel smb client - Out of Bounds Read
Linux kernel smb client contains a buffer overflow caused by improper bounds checking of tree connect response byte count in CIFSTCon(), letting attackers cause memory corruption, exploit requires crafted server response.
- 9.1 /10 CriticalCVE-2026-89630 No auth
Linux Kernel smb client - Broken Access Control
Linux kernel smb client contains a broken access control vulnerability caused by incorrect data_offset bound check in is_valid_oplock_break(), letting attackers bypass read overflow protections, exploit requires crafted SMB messages.
- 8.8 /10 HighCVE-2026-89626 No auth
Linux Kernel HID Sensor Custom - Resource Cleanup Misconfiguration
Linux kernel HID sensor custom driver contains a resource cleanup flaw caused by incomplete sysfs group removal on failure in hid_sensor_custom_add_attributes(), letting attackers potentially cause resource leaks or instability, exploit requires kernel interaction with custom sensor fields.
- 7.8 /10 HighCVE-2026-89624 Auth required
Linux Kernel HID universal_pidff - Use After Free
Linux kernel HID universal_pidff contains a use-after-free vulnerability caused by not stopping the device when force-feedback initialization fails, letting attackers cause memory corruption, exploit requires a device with PID usage page and no input reports.
- 7.8 /10 HighCVE-2026-89622
Linux kernel HID mcp2221 - Use After Free
Linux kernel HID mcp2221 contains a use-after-free caused by not clearing the rxbuf pointer after I2C/SMBus transfer completion, letting attackers cause memory corruption via delayed device reports, exploit requires device interaction.
- 7.8 /10 HighCVE-2026-89620
Linux Kernel - Buffer Overflow
Linux kernel intel-thc-hid and intel-quickspi contain a heap buffer overflow caused by missing validation of report size before copying in write_cmd_to_txdma(), letting attackers with crafted HID reports overflow buffers, exploit requires access to hidraw SET_REPORT/SET_FEATURE ioctl.