Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 599 of 677
- 7.8 /10 HighCVE-2026-80961 Auth required
Linux Kernel dm-pcache - Information Disclosure
Linux kernel dm-pcache contains an out-of-bounds read caused by improper validation of kset key_num and intra-segment bounds in cache_key_decode(), letting attackers with CAP_SYS_ADMIN leak adjacent persistent memory to user space, exploit requires CAP_SYS_ADMIN privilege.
- 7.8 /10 HighCVE-2026-80959 Auth required
Linux Kernel dm-pcache - Out of Bounds Read
Linux kernel dm-pcache contains a buffer overflow caused by unchecked segment offset in cache_pos_decode(), letting attackers with CAP_SYS_ADMIN privileges read past segment data, exploit requires CAP_SYS_ADMIN privileges.
- 7.1 /10 HighCVE-2026-80958
Linux kernel dm-pcache - Out of Bounds Read
Linux kernel dm-pcache contains a buffer over-read caused by improper bounds checking in tail kset read in cache_replay(), letting attackers potentially read beyond segment data, exploit requires local access.
- 7.8 /10 HighCVE-2026-80955 Auth required
Linux Kernel dm-pcache - Use After Free
Linux kernel dm-pcache contains a use-after-free vulnerability caused by accessing freed key memory in kset_replay(), letting attackers cause memory corruption or denial of service, exploit requires triggering stale key conditions.
- 7.8 /10 HighCVE-2026-80954 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode(), letting attackers cause memory corruption or system instability, exploit requires kernel-level access.
- 8.4 /10 HighCVE-2026-80953 No auth
Linux kernel i3c master adi - Race Condition
Linux kernel i3c master adi contains a race condition caused by initializing the lock after enabling interrupts in adi_i3c_master_probe(), letting interrupts access uninitialized lock, exploit requires interrupt triggering after IRQ unmasking.
- 7.8 /10 HighCVE-2026-80952
Linux Kernel i3c Master - Use After Free & Information Disclosure
Linux kernel i3c master contains an information leak and use-after-free caused by clearing device descriptor before device_unregister(), letting attackers leak kernel stack contents and cause use-after-free during device unregistration, exploit requires race condition during device unbind.
- 7.8 /10 HighCVE-2026-80950
Linux Kernel Renesas I3C - Use After Free
Linux kernel Renesas I3C driver contains a use-after-free vulnerability caused by accessing freed memory in the interrupt handler, letting attackers cause system crashes, exploit requires triggering interrupt after timeout.
- 7.8 /10 HighCVE-2026-80947 Auth required
Linux kernel rtl8xxxu - Use After Free
Linux kernel rtl8xxxu driver contains a use-after-free vulnerability caused by improper cancellation of rx_urb_wq worker during device stop, letting attackers cause memory corruption or system instability, exploit requires active RX traffic followed by device disconnect.
- 9.1 /10 CriticalCVE-2026-80945
Linux kernel crypto: iaa - Data Tampering
Linux kernel crypto: iaa contains a data tampering vulnerability caused by improper unmapping of destination buffer before software fallback on decompress, letting attackers cause data corruption, exploit requires hardware analytics error triggering fallback.
- 7.8 /10 HighCVE-2026-80944 Auth required
Linux Kernel mwifiex - Denial of Service
Linux kernel mwifiex driver contains a stack corruption vulnerability caused by late firmware responses writing through stale stack-backed data buffers after interrupted wait_event_interruptible_timeout calls, letting attackers cause kernel panic and memory corruption, exploit requires repeated association/disassociation cycles.
- 7.6 /10 HighCVE-2026-80943 No auth
Linux Kernel rtlwifi - Out-of-Bounds Read/Write
Linux kernel wifi rtlwifi rtl8192du contains an out-of-bounds array indexing vulnerability caused by unchecked QoS TID indexing in rtl92du_tx_fill_desc(), letting attackers potentially cause memory corruption or denial of service, exploit requires crafted network packets.
- 8.8 /10 HighCVE-2026-80937
Linux Kernel - Out-of-Bounds Write
Linux kernel contains a buffer overflow caused by unchecked device-controlled EEPROM address in mt7915_mcu_get_eeprom(), letting malicious devices perform out-of-bounds writes, exploit requires malicious or malfunctioning device.
- 7.8 /10 HighCVE-2026-80936
Linux kernel mt76 mt7925 - Use After Free
Linux kernel mt76 mt7925 contains a use-after-free caused by not cancelling delayed mlo_pm_work during device stop, letting attackers cause kernel warnings or crashes, exploit requires device teardown during power-save setup.
- 8.8 /10 HighCVE-2026-80935
Linux Kernel mt76 - Out-of-Bounds Write
Linux kernel mt76 mt7996 contains an out-of-bounds write vulnerability caused by unbounded device EEPROM address in mt7996_mcu_get_eeprom(), letting malicious devices write beyond eeprom.data, exploit requires malicious or malfunctioning device.