Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 589 of 677

  • 9.8 /10 Critical
    CVE-2026-89555 No auth

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in mpls_select_multipath caused by stale header pointer after pskb_may_pull() reallocates skb head, letting attackers cause kernel memory corruption, exploit requires crafted Geneve packet with nonlinear skb data.

  • 8.2 /10 High
    CVE-2026-89554 No auth

    Linux Kernel - Memory Corruption

    Linux kernel contains a memory corruption vulnerability caused by uninitialized local_id in syncookie MP_JOIN reconstruction, letting off-path attackers corrupt subflow bookkeeping, exploit requires sending concurrent MP_JOIN SYNs.

  • 7.8 /10 High
    CVE-2026-89553 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability caused by a race condition between info ioctl vma lookup and gem close path in nouveau/gem, letting attackers cause memory corruption, exploit requires race condition timing.

  • 9.8 /10 Critical
    CVE-2026-89551 No auth

    Linux Kernel - Integer Overflow

    Linux kernel contains an integer underflow vulnerability in SUNRPC xdr_buf_trim function caused by improper clamping of buf->len during subtraction, letting attackers cause buffer length miscalculation, exploit requires crafted input triggering xdr_buf_trim.

  • 9.8 /10 Critical
    CVE-2026-89550 No auth

    Linux Kernel - Denial of Service

    Linux kernel contains a buffer length validation vulnerability in SUNRPC svcauth_gss component, caused by missing minimum length check on krb5 tokens, letting remote attackers cause a denial of service via crafted tokens, exploit requires network access.

  • 7.5 /10 High
    CVE-2026-89549 No auth

    Linux Kernel - Denial of Service

    Linux kernel contains a denial of service caused by svc_pool_for_cpu() routing to threadless pools in sunrpc, letting attackers cause connection hangs indefinitely, exploit requires specific nfsd thread configuration.

  • 7.8 /10 High
    CVE-2026-89548 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in SUNRPC due to improper handling of cache_cleaner delayed_work during cache_detail destruction, letting attackers cause memory corruption, exploit requires kernel-level access.

  • 8.1 /10 High
    CVE-2026-89547 No auth

    Linux Kernel - Broken Authentication

    Linux kernel contains a broken authentication caused by unchecked percpu_counter allocation failure in SUNRPC svc pool initialization, letting local administrators cause memory corruption and kernel instability, exploit requires local admin privileges under memory pressure.

  • 9.8 /10 Critical
    CVE-2026-89546 No auth

    Linux Kernel - Race Condition

    Linux kernel contains a race condition in SUNRPC backchannel handling caused by improper teardown of NFS callback service, letting attackers cause resource leaks or use-after-free, exploit requires race condition timing.

  • 7.8 /10 High
    CVE-2026-89545 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability caused by premature freeing of rq_argp and rq_resp in sunrpc component, letting attackers cause memory corruption or denial of service, exploit requires concurrent RCU readers.

  • 7.5 /10 High
    CVE-2026-89544 No auth

    Linux Kernel SUNRPC - Use After Free

    Linux kernel contains a use-after-free and refcount leak in SUNRPC gssx_dec_option_array caused by improper error path handling and memory management, letting attackers cause NULL dereference and memory corruption, exploit requires kernel-level access.

  • 9.8 /10 Critical
    CVE-2026-89542 No auth

    Linux Kernel - Memory Corruption & Denial of Service

    Linux kernel contains a buffer over-read and integer underflow vulnerability in SUNRPC gss_krb5_unwrap_v2 caused by insufficient validation of token length and buffer boundaries, letting attackers cause memory corruption or denial of service, exploit requires crafted short tokens.

  • 9.8 /10 Critical
    CVE-2026-89541 No auth

    Linux Kernel - Out-of-Bounds Read

    Linux kernel contains an out-of-bounds read vulnerability in SUNRPC gss_unwrap_resp_priv due to improper length checks on RPCSEC_GSS opaque length, letting a crafted krb5p NFS server cause memory corruption, exploit requires crafted RPCSEC_GSS reply.

  • 7.8 /10 High
    CVE-2026-89540 Auth required

    Linux Kernel - Race Condition

    Linux kernel contains a race condition in sunrpc where /proc/net/rpc/use-gss-proxy is published before initializing gssp_lock mutex, letting local userspace attackers cause mutex misuse and client leaks, exploit requires concurrent access during module load.

  • 9.8 /10 Critical
    CVE-2026-89538 No auth

    Linux kernel - Authentication Bypass

    Linux kernel contains a broken authentication vulnerability in SUNRPC where oversized Kerberos v2 wrap tokens with invalid ec field are not properly rejected, letting attackers with valid GSS context cause semantic buffer inconsistencies, exploit requires valid GSS context.