Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 591 of 677
- 7.5 /10 HighCVE-2026-89511 No auth
Linux Kernel qede - Denial of Service
Linux kernel qede driver contains a null pointer dereference caused by uninitialized tpa_info->buffer.data in TPA fragment processing, letting attackers cause kernel panic under memory pressure, exploit requires memory pressure conditions.
- 7.8 /10 HighCVE-2026-89510 Auth required
Linux Kernel RDMA/cxgb4 - Use After Free
Linux kernel RDMA/cxgb4 contains a use-after-free vulnerability caused by accessing freed device memory during asynchronous registration work, letting attackers cause memory corruption or system instability, exploit requires device removal during registration.
- 7.8 /10 HighCVE-2026-89508 Auth required
Linux Kernel RDMA/ucma - Use After Free
Linux kernel RDMA/ucma contains a use-after-free caused by missing handler lock in ucma_set_ib_path(), letting attackers cause kernel memory corruption and system instability, exploit requires presence of RDMA device.
- 7.8 /10 HighCVE-2026-89507 Auth required
Linux Kernel RDMA/ucma - Denial of Service
Linux kernel RDMA/ucma contains a list corruption caused by improper locking in ucma_write_cm_event(), letting unprivileged users cause denial of service by wedging kernel mutex and corrupting event lists, exploit requires access to /dev/infiniband/rdma_cm device.
- 8.4 /10 HighCVE-2026-89504 No auth
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by premature of_node_put call in as3722_get_regulator_dt_data, letting attackers cause system instability or crashes, exploit requires access to vulnerable kernel component.
- 7.8 /10 HighCVE-2026-89503 Auth required
Linux Kernel - Race Condition
Linux kernel contains a race condition in ring_buffer_alloc_read_page() caused by concurrent subbuf_order changes, letting attackers cause memory allocation inconsistencies, exploit requires concurrent access to ring buffer.
- 7.8 /10 HighCVE-2026-89501 Auth required
Linux Kernel - Race Condition
Linux kernel contains a race condition in ring buffer resizing caused by improper locking in cpu_buffer, letting attackers cause data corruption or denial of service, exploit requires concurrent access to ring buffer.
- 7.8 /10 HighCVE-2026-89500
Linux Kernel - Denial of Service
Linux kernel contains a memory management vulnerability caused by mismatched page order handling in ring-buffer's cpu_buffer during concurrent resize, letting attackers cause kernel crashes or memory leaks, exploit requires concurrent ring buffer resize.
- 7.8 /10 HighCVE-2026-89499 Auth required
Linux Kernel - Race Condition
Linux kernel contains a race condition in ring-buffer remote reader update caused by improper handling of swap_reader_page callback failure, letting remote readers cause inconsistent page state, exploit requires event storm on small buffer.
- 7.8 /10 HighCVE-2026-89497 Auth required
Linux Kernel - Out of Bounds Read/Write
Linux kernel contains a buffer overflow caused by inconsistent handling of leading spaces in client debug mask parsing in orangefs_prepare_cdm_array(), letting attackers write past allocated buffer, exploit requires crafted client debug entry.
- 9.8 /10 CriticalCVE-2026-89495 No auth
Linux Kernel ocfs2 - Out-of-Bounds Write & Read
Linux kernel ocfs2 contains a heap out-of-bounds write caused by unbounded peer-controlled length fields in dlm_migrate_request_handler and related handlers, letting any node in a DLM domain corrupt or panic other nodes, exploit requires attacker to be a member of the cluster.
- 9.8 /10 CriticalCVE-2026-89494 No auth
Linux Kernel ocfs2 - Out-of-Bounds Read & Write
Linux kernel ocfs2 contains an out-of-bounds read and heap out-of-bounds write caused by unvalidated num_locks and lockname_len fields in dlm_mig_lockres_handler, letting any node in the domain cause a kernel panic or memory corruption, exploit requires network access within the domain.
- 8.8 /10 HighCVE-2026-89493 Auth required
Linux Kernel ocfs2 - Out of Bounds Read & Write
Linux kernel ocfs2 contains an out-of-bounds read and write caused by missing validation of rl_used and rl_count fields in refcount block, letting local attackers with CAP_SYS_ADMIN mount crafted or corrupted images to cause memory corruption, exploit requires CAP_SYS_ADMIN privileges.
- 9.8 /10 CriticalCVE-2026-89492 No auth
Linux Kernel ocfs2 - Out-of-Bounds Read
Linux kernel ocfs2 filesystem contains an out-of-bounds read vulnerability caused by missing bounds checks on directory-index entry counts in metadata blocks, letting attackers with crafted on-disk images cause slab out-of-bounds reads during directory operations, exploit requires mounting a crafted filesystem image.
- 7.8 /10 HighCVE-2026-89489 Auth required
Linux Kernel - Broken Access Control
Linux kernel openrisc ABI < 244 contains an arbitrary kernel memory access vulnerability caused by unchecked user pointers in sys_or1k_atomic syscall, letting unprivileged attackers read/write kernel memory and execute code, exploit requires unprivileged process.