Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 598 of 677

  • 8.8 /10 High
    CVE-2026-80989 No auth

    Linux kernel net thunderbolt - Denial of Service

    Linux kernel net thunderbolt contains a logic flaw in tbnet_connected_work() where connection state is not properly cleared on failure, causing repeated teardown and resource mismanagement, letting attackers cause system warnings or crashes, exploit requires network interaction.

  • 7.5 /10 High
    CVE-2026-80987 No auth

    Linux Kernel - Denial of Service

    Linux kernel contains a denial of service caused by improper handling of oversized TX buffers in ntb_transport, letting attackers cause resource leaks, exploit requires sending oversized buffers.

  • 9.8 /10 Critical
    CVE-2026-80986 No auth

    Linux Kernel - Out of Bounds Read/Write

    Linux kernel contains a buffer over-read vulnerability in net/smc SMC-Rv2 LLC message handling caused by unbounded peer rkey counts, letting attackers cause kernel memory corruption or crash, exploit requires network access to SMC-Rv2 link.

  • 8.2 /10 High
    CVE-2026-80985

    Linux Kernel - Data Tampering & Denial of Service

    Linux kernel contains a vulnerability in net/smc where oversized SMC-Rv2 LLC messages are improperly handled in smc_llc_rmt_delete_rkey() and smc_llc_save_add_link_rkeys(), letting attackers cause unintended rkey deletions and modifications, exploit requires crafted SMC-Rv2 LLC messages on a shared v2 receive buffer link.

  • 7.8 /10 High
    CVE-2026-80982 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in net/smc due to improper locking in smc_rx_pipe_buf_release(), letting attackers cause memory corruption or denial of service, exploit requires concurrent socket close and receive operations.

  • 9.8 /10 Critical
    CVE-2026-80981

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in net/smc component caused by use of freed LLC queue entry in smc_llc_srv_add_link(), letting attackers cause memory corruption or system instability, exploit requires kernel-level conditions.

  • 9.8 /10 Critical
    CVE-2026-80980 No auth

    Linux Kernel - Race Condition

    Linux kernel contains a race condition in net/smc due to shared single-byte bitfields for connection state flags, letting concurrent contexts cause inconsistent state, exploit requires concurrent access to connection flags.

  • 7.8 /10 High
    CVE-2026-80979 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in net/smc due to improper connection unregistering and tasklet draining, letting attackers cause kernel memory corruption, exploit requires triggering specific network operations.

  • 7.8 /10 High
    CVE-2026-80978 Auth required

    Linux Kernel - Buffer Overflow

    Linux kernel contains a buffer overflow caused by uncapped advertised IP tunnel headroom derived from lower output devices, letting attackers cause skb header offset wrap, exploit requires crafted tunnel configuration.

  • 7.8 /10 High
    CVE-2026-80977

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in net subsystem caused by improper handling of shared zerocopy state in skb_tx_error(), letting attackers cause memory corruption or data tampering via cloned skb packets, exploit requires packet cloning in Open vSwitch.

  • 9.8 /10 Critical
    CVE-2026-80976 No auth

    Linux Kernel - Out-of-Bounds Read

    Linux kernel contains a buffer out-of-bounds vulnerability caused by stale IPv6 control block values after IPv6 decapsulation in seg6, letting unprivileged users read beyond skb head, exploit requires local SID installation and packet injection.

  • 7.8 /10 High
    CVE-2026-80975 Auth required

    Linux Kernel - Memory Corruption

    Linux kernel contains a stack buffer overflow caused by use of an on-stack reply buffer in qnap_mcu_exec() that can be overwritten by late or unsolicited MCU messages, letting attackers cause memory corruption, exploit requires triggering command timeout.

  • 7.8 /10 High
    CVE-2026-80971 Auth required

    Linux Kernel ALSA bcd2000 - Use After Free

    Linux kernel ALSA bcd2000 contains a use-after-free vulnerability caused by freed URB pointers not being cleared on device disconnect, letting local attackers cause memory corruption or kernel crash, exploit requires device unplug during substream use.

  • 8.4 /10 High
    CVE-2026-80967 No auth

    Linux Kernel ALSA pcxhr - Race Condition

    Linux kernel ALSA pcxhr contains a race condition caused by initializing mutexes after requesting threaded IRQ, letting interrupts run against uninitialized mutexes, exploit requires race condition during device probe.

  • 7.8 /10 High
    CVE-2026-80962 Auth required

    Linux Kernel dm-pcache - Out-of-Bounds Read & Write

    Linux kernel dm-pcache contains an out-of-bounds read and write caused by unvalidated geometry fields from on-disk cache_info, letting attackers with CAP_SYS_ADMIN privileges cause memory corruption, exploit requires CAP_SYS_ADMIN.