Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 592 of 677
- 7.8 /10 HighCVE-2026-89488 Auth required
Linux Kernel openvswitch - Use After Free
Linux kernel openvswitch contains a use-after-free vulnerability caused by improper handling of CT limit state under RCU and ovs_mutex during netns teardown, letting unprivileged users trigger slab-use-after-free in ovs_ct_execute(), exploit requires user and network namespace access.
- 7.8 /10 HighCVE-2026-89487 Auth required
Linux Kernel openvswitch - Broken Access Control
Linux kernel openvswitch contains a broken access control vulnerability caused by improper handling of skb_tx_error() on packets still in use, letting unprivileged attackers perform unauthorized page-cache writes, exploit requires triggering specific packet flows with MSG_ZEROCOPY skb.
- 7.8 /10 HighCVE-2026-89486
Linux Kernel ipmi - Use After Free
Linux kernel ipmi contains a use-after-free vulnerability caused by missing synchronize_rcu() before freeing cmd_rcvr in _ipmi_destroy_user(), letting attackers cause memory corruption, exploit requires kernel-level access.
- 9.8 /10 CriticalCVE-2026-89485 No auth
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in lockd due to improper pinning of the next file pointer during nlm_inspect_file lock-drop, letting attackers cause memory corruption, exploit requires concurrent file operations.
- 7.5 /10 HighCVE-2026-89483
Linux kernel nvme - Information Disclosure
Linux kernel nvme contains an uninitialized memory disclosure caused by fallback discard page not being zeroed in nvme_setup_discard, letting attackers with memory pressure conditions leak kernel memory, exploit requires memory pressure causing allocation failure.
- 9.8 /10 CriticalCVE-2026-89482 No auth
Linux Kernel nvme-tcp - Memory Corruption
Linux kernel nvme-tcp contains a memory corruption vulnerability caused by improper validation of C2HData based on blk_rq_payload_bytes() without checking blk_rq_nr_phys_segments(), letting attackers cause wild memory access and kernel crash, exploit requires crafted network packets targeting WRITE_ZEROES commands.
- 7.5 /10 HighCVE-2026-89481
Linux Kernel nvme-tcp - Information Disclosure
Linux kernel nvme-tcp contains an information disclosure vulnerability caused by improper direction check in nvme_tcp_handle_r2t for read commands, letting malicious controllers read host memory, exploit requires malicious controller sending crafted R2T packets.
- 7.5 /10 HighCVE-2026-89480 No auth
Linux Kernel nvme-tcp - Data Integrity Vulnerability
Linux kernel nvme-tcp contains a data integrity vulnerability caused by improper validation of read byte count in nvme_tcp_recv_data(), letting attackers cause incomplete reads to be reported as complete, exploit requires malicious NVMe controller.
- 9.8 /10 CriticalCVE-2026-89479 No auth
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in SCTP due to improper handling of association deletion in sctp_endpoint_bh_rcv(), letting remote attackers cause memory corruption by sending crafted SCTP packets, exploit requires network access.
- 9.8 /10 CriticalCVE-2026-89478 No auth
Linux Kernel SCTP - Use After Free
Linux kernel SCTP contains a use-after-free vulnerability caused by a race condition where a removed transport is accessed in SCTP packet processing, letting authenticated attackers cause memory corruption, exploit requires authenticated ASCONF DEL-IP.
- 7.5 /10 HighCVE-2026-89477 No auth
Linux Kernel - Denial of Service
Linux kernel contains a NULL pointer dereference vulnerability in SCTP stream reconfiguration caused by completing untransmitted RECONF requests, letting unprivileged local attackers cause kernel panic, exploit requires local unprivileged process to remove last address and request stream reset.
- 7.5 /10 HighCVE-2026-89476 No auth
Linux Kernel - Integer Overflow
Linux kernel contains an integer underflow caused by duplicate SCTP RECONF responses processing the same ADD_OUT request multiple times, letting attackers potentially cause memory corruption, exploit requires sending duplicate RECONF responses.
- 7.8 /10 HighCVE-2026-89472 Auth required
Linux Kernel - Use After Free
Linux kernel power supply charger-manager contains a use-after-free vulnerability caused by improper ordering of regulator release and sysfs teardown, letting local users cause memory corruption via concurrent sysfs writes, exploit requires concurrent access to externally_control sysfs attribute.
- 8.4 /10 HighCVE-2026-89471
Linux Kernel - Out of Bounds Write
Linux kernel power supply cros_usbpd-charger contains a buffer overflow caused by improper validation of EC-reported port counts in cros_usbpd_charger_probe(), letting a malicious or compromised EC cause out-of-bounds write, exploit requires malicious or compromised EC.
- 8.4 /10 HighCVE-2026-89470
Linux kernel cros_usbpd - Out of Bounds Read/Write
Linux kernel power supply cros_usbpd driver contains an out-of-bounds write vulnerability caused by improper validation of port counts from the embedded controller, letting a malicious embedded controller cause memory corruption, exploit requires a malicious embedded controller.