Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 587 of 677
- 7.8 /10 HighCVE-2026-89602 No auth
Linux Kernel erofs - Denial of Service
Linux kernel erofs contains a buffer resizing vulnerability caused by improper handling of global buffer resizing, letting attackers cause memory allocation errors or potential memory corruption, exploit requires kernel-level access.
- 8.8 /10 HighCVE-2026-89601 Auth required
Linux Kernel ext2 - Broken Access Control
Linux kernel ext2 filesystem contains a broken access control caused by lost inode updates for IS_SYNC inodes due to improper inode metadata synchronization, letting attackers cause data corruption, exploit requires local access.
- 7.8 /10 HighCVE-2026-89600 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in fanotify caused by referencing a stale file range pointer from the triggering task's stack, letting local attackers cause memory corruption, exploit requires triggering fanotify events and signal interruption.
- 8.4 /10 HighCVE-2026-89599
Linux Kernel - Race Condition
Linux kernel contains a race condition caused by initializing a mutex lock after registering the display in fbdev omapfb panel-dsi-cm, letting concurrent consumers cause undefined behavior, exploit requires concurrent access to display callbacks.
- 7.8 /10 HighCVE-2026-89597 Auth required
Linux Kernel - Resource Management Flaw
Linux kernel contains a resource management flaw caused by failure to unregister v86d connector callback on platform driver registration failure in uvesafb_init(), letting attackers cause resource leaks, exploit requires kernel code execution.
- 7.1 /10 HighCVE-2026-89596 Auth required
Linux Kernel forcedeth - Out of Bounds Read/Write
Linux kernel forcedeth driver contains an off-by-one vulnerability caused by incorrect loop boundary in saving/restoring non-PCI config space, letting attackers trigger out-of-bounds memory access during suspend/resume, exploit requires kernel module loaded and suspend/resume cycle.
- 7.8 /10 HighCVE-2026-89594
Linux Kernel - Denial of Service
Linux kernel contains a denial of service caused by missing DMA mask setup in the OMAP SSI controller device, letting attackers trigger crashes or warnings during DMA operations, exploit requires driver usage of the affected device.
- 7.1 /10 HighCVE-2026-89593
Linux Kernel - Resource Management Vulnerability
Linux kernel contains a memory reservation underflow vulnerability caused by improper adjustment of hugetlb reservations during unmapping when mapcount is not zero, letting attackers cause resource mismanagement, exploit requires specific memory mapping conditions.
- 8.4 /10 HighCVE-2026-89588 No auth
Linux Kernel - Out of Bounds Read
Linux kernel contains a buffer over-read caused by incorrect ARM section length accounting in ghes_handle_arm_hw_error(), letting attackers potentially read beyond CPER section, exploit requires crafted error data.
- 7.8 /10 HighCVE-2026-89587 Auth required
Linux Kernel - Buffer Overflow
Linux kernel contains a stack buffer overflow in ACPI pfr_update's query_capability() caused by unchecked memcpy of firmware-supplied buffers larger than destination arrays, letting local attackers cause memory corruption, exploit requires local access.
- 8.2 /10 HighCVE-2026-89586 No auth
Linux Kernel - Denial of Service
Linux kernel contains a broken TRIM command handling vulnerability in ata_scsi_write_same_xlat due to incorrect sizing of DSM TRIM descriptors for sector sizes larger than 2048 bytes, letting attackers cause TRIM commands to fail on 4Kn devices, exploit requires usage of devices with large logical sector sizes.
- 7.8 /10 HighCVE-2026-89585 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by scheduling backlight work before charlcd device registration, letting attackers cause system instability or denial of service, exploit requires specific kernel configuration.
- 7.8 /10 HighCVE-2026-89584 Auth required
Linux Kernel - Misconfiguration
Linux kernel contains a validation bypass caused by improper checking of user space vectors alignment in bio-based and stacking block drivers, letting attackers cause errors or crashes, exploit requires crafted bio vectors.
- 8.1 /10 HighCVE-2026-89583 No auth
Linux Kernel - Out-of-Bounds Read
Linux kernel contains an out-of-bounds read in Bluetooth eir_get_service_data() caused by incorrect length calculation in advertising data parsing, letting attackers cause memory disclosure via ISO broadcast sink, exploit requires crafted periodic advertising reports.
- 7.8 /10 HighCVE-2026-89581 Auth required
Linux Kernel - Privilege Escalation
Linux kernel contains a privilege escalation caused by incorrect per-CPU address resolution in BPF x86 extended registers, letting attackers cause kernel panic and memory corruption, exploit requires running BPF programs with GCC-compiled per-CPU addresses.