Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 597 of 677
- 7.8 /10 HighCVE-2026-81010 Auth required
Linux Kernel io_uring - Denial of Service
Linux kernel io_uring contains a task_work cancellation handling flaw in io_waitid_cb(), causing incorrect child process wait behavior when fallback task_work runs from kworker, letting attackers cause denial of service by request cancellation.
- 7.8 /10 HighCVE-2026-81008
Linux Kernel - Use After Free
Linux kernel contains a use after free vulnerability in interconnect component caused by improper freeing of path object in icc_get() and of_icc_get_by_index(), letting local attackers cause memory corruption, exploit requires kernel debugfs access.
- 7.1 /10 HighCVE-2026-81007 Auth required
Linux Kernel - Buffer Validation Vulnerability
Linux kernel contains a buffer validation vulnerability in ipmb_write() caused by reading message fields before validating length, letting attackers cause memory corruption or information disclosure, exploit requires crafted IPMB messages.
- 7.8 /10 HighCVE-2026-81006
Linux kernel ipmi - Use After Free
Linux kernel ipmi contains a use-after-free vulnerability caused by incomplete sysfs file removal on ipmi_add_smi registration failure, letting attackers cause system instability or denial of service, exploit requires triggering registration failure.
- 8.4 /10 HighCVE-2026-81004
Linux Kernel - Race Condition
Linux kernel contains a race condition in IPMI message handler caused by improper cancellation of scheduled work on error during IPMI interface startup, letting attackers cause resource mismanagement, exploit requires triggering IPMI interface startup error.
- 8.1 /10 HighCVE-2026-81003 No auth
Linux Kernel - Broken Access Control
Linux kernel contains an AF_IUCV socket binding vulnerability caused by lack of ingress device verification in afiucv_hs_rcv(), letting attackers inject data, exhaust accept queues, or spoof peers across network namespaces, exploit requires sending crafted frames on the same HiperSockets segment.
- 9.8 /10 CriticalCVE-2026-81002
Linux Kernel - Memory Corruption
Linux kernel contains a memory corruption vulnerability in xdp_convert_zc_to_xdp_frame caused by improper zero-copy frame layout handling in AF_XDP packets redirected through cpumap, letting attackers cause kernel panic or memory corruption, exploit requires use of AF_XDP zero-copy with cpumap redirection.
- 7.8 /10 HighCVE-2026-81001 Auth required
Linux Kernel slip - Use After Free
Linux kernel slip driver contains a use-after-free vulnerability caused by race conditions in slip_devs[] handling during device teardown and synchronization, letting local attackers cause memory corruption, exploit requires concurrent slip device open/close operations.
- 7.8 /10 HighCVE-2026-81000 PoC publicAuth required
Linux Kernel net tun - Buffer Overflow
Linux kernel net tun driver contains a buffer overflow caused by improper handling of skb headroom and alignment in tun_get_user(), letting attackers cause memory corruption, exploit requires crafted oversized headroom request.
- 7.5 /10 HighCVE-2026-80998 No auth
Linux kernel net: bnxt - Denial of Service
Linux kernel net: bnxt contains a denial of service caused by missing doorbell ringing on early exit in SW USO path, letting attackers cause TX queue stalls, exploit requires sending burst packets triggering early return.
- 7.5 /10 HighCVE-2026-80997 No auth
Linux Kernel - Denial of Service
Linux kernel contains a denial of service caused by improper handling of the modem TX queue during runtime resume in net: ipa component, letting attackers cause permanent transmit stalls, exploit requires device runtime suspend/resume cycles.
- 7.8 /10 HighCVE-2026-80995 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in the MCTP network component caused by improper reference handling of route device in mctp_route_lookup(), letting unprivileged local AF_MCTP users cause memory corruption, exploit requires local access.
- 7.8 /10 HighCVE-2026-80994 Auth required
Linux Kernel openvswitch - Use After Free
Linux kernel openvswitch contains a use-after-free vulnerability caused by improper RCU locking order during flow deletion in flow mask handling, letting attackers cause kernel crashes, exploit requires network access to trigger flow deletion.
- 7.8 /10 HighCVE-2026-80992 Auth required
Linux Kernel net: ravb - Denial of Service
Linux kernel net: ravb contains a null pointer dereference caused by querying PTP clock index before first open or registration failures, letting attackers cause denial of service, exploit requires triggering clock query before initialization.
- 7.8 /10 HighCVE-2026-80991 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by a race condition between ravb_ptp_interrupt() and ravb_ptp_stop() in PTP clock teardown, letting attackers cause memory corruption, exploit requires triggering PTP clock events.