Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 588 of 677
- 7.8 /10 HighCVE-2026-89580 Auth required
Linux Kernel - Out-of-Bounds Write
Linux kernel contains a buffer overflow caused by a preemptible BPF program reusing a per-CPU perf_callchain_entry buffer during __bpf_get_stack(), letting attackers cause out-of-bounds write, exploit requires running a preemptible BPF program.
- 7.8 /10 HighCVE-2026-89579 Auth required
Linux Kernel - Privilege Escalation
Linux kernel contains a local privilege escalation vulnerability in bpf bloom filter sizing and indexing on 32-bit kernels caused by under-allocation and incorrect bit indexing, letting local attackers with CAP_BPF escalate privileges.
- 7.8 /10 HighCVE-2026-89574 Auth required
Linux Kernel dm array - Out of Bounds Read
Linux kernel dm array contains a validation bypass caused by insufficient checks on array block headers, letting attackers potentially cause out-of-bounds reads, exploit requires crafted dm array metadata.
- 7.8 /10 HighCVE-2026-89573
Linux Kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability caused by dm array accepting array blocks with mismatched value sizes, letting attackers cause inconsistent metadata processing, exploit requires crafted metadata.
- 7.1 /10 HighCVE-2026-89571 Auth required
Linux Kernel - Out of Bounds Read & Denial of Service
Linux kernel contains a buffer overflow caused by improper bounds checking of fwctl command payload in cxl/features, letting attackers cause out-of-bounds memory read and kernel crash, exploit requires crafted fwctl command with manipulated op_size.
- 7.8 /10 HighCVE-2026-89570 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by improper lifetime management of the CXL MCE notifier in cxl/mce, letting attackers trigger NULL dereferences and use-after-free in the MCE handler, exploit requires specific hardware with CXL regions having extended linear cache.
- 8.8 /10 HighCVE-2026-89569 No auth
Linux Kernel Bluetooth RFCOMM - Use After Free
Linux kernel Bluetooth RFCOMM contains a use-after-free vulnerability caused by unsynchronized access to session and DLC lists in rfcomm_security_cfm(), letting local attackers cause memory corruption, exploit requires concurrent session teardown.
- 7.8 /10 HighCVE-2026-89564 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by orphaning prefetched skbs before multicast forwarding, letting attackers cause kernel memory corruption or denial of service, exploit requires multicast packet forwarding.
- 7.8 /10 HighCVE-2026-89563 Auth required
Linux Kernel - Use After Free
Linux kernel ip6_tunnel contains a memory management flaw in ip6_tnl_xmit() caused by improper skb headroom expansion using skb_realloc_headroom(), letting kernel components potentially free stale skb pointers, exploit requires kernel-level interaction.
- 7.8 /10 HighCVE-2026-89562 Auth required
Linux Kernel ip6_gre - Misconfiguration
Linux kernel ip6_gre contains a vulnerability caused by incorrect hardware header length calculation in NBMA tunnels, letting attackers potentially cause network issues, exploit requires specific tunnel configurations.
- 7.5 /10 HighCVE-2026-89561 No auth
Linux Kernel - Denial of Service
Linux kernel contains a NULL pointer dereference vulnerability in ipv6_rpl_srh_rcv() caused by missing NULL check on idev from __in6_dev_get(), letting attackers cause kernel crash via MTU flapping and ping6 traffic, exploit requires network access to affected interface.
- 8.4 /10 HighCVE-2026-89560 Auth required
Linux Kernel - Broken Access Control
Linux kernel contains a permission control vulnerability in Landlock where whiteout creation in OverlayFS was improperly guarded, allowing unprivileged users to create whiteout objects without proper LANDLOCK_ACCESS_FS_MAKE_REG permission, exploit requires userspace access to OverlayFS whiteout creation.
- 7.8 /10 HighCVE-2026-89559
Linux Kernel libnvdimm - Integer Overflow
Linux kernel libnvdimm contains an integer overflow caused by 32-bit multiplication wraparound in __nd_label_validate(), letting attackers trigger out-of-bounds write via crafted nslot value, exploit requires untrusted input from medium or userspace.
- 9.8 /10 CriticalCVE-2026-89558 No auth
Linux Kernel md/raid10 - Data Corruption
Linux kernel md/raid10 contains a logic error caused by incorrect boolean assignment in raid10_sync_request(), letting attackers cause silent data corruption during device recovery, exploit requires degraded RAID10 array with device failure.
- 7.8 /10 HighCVE-2026-89557
Linux Kernel - Integer Overflow
Linux kernel contains an integer overflow caused by lack of overflow check on sb->bblog_shift in super_1_load(), letting attackers trigger overflow in badblocks_set() via crafted superblock, exploit requires crafted on-disk superblock.