Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 618 of 677

  • 9.1 /10 Critical
    CVE-2026-45764 No auth

    Suricata - Denial of Service

    Suricata < 7.0.16 and < 8.0.5 contain a denial of service caused by type confusion during HTTP/2 protocol processing, letting attackers crash the system remotely, exploit requires crafted HTTP/2 traffic.

  • 7.5 /10 High
    CVE-2026-45762 No auth

    Suricata - Denial of Service

    Suricata < 7.0.16 and < 8.0.5 contain a denial of service caused by improper IP defragmentation tracker lookup allowing IPv6 fragments to be associated with IPv4 trackers, letting remote attackers crash the system via crafted fragmented packets, exploit requires crafted fragmented IPv4/IPv6 traffic.

  • 7.5 /10 High
    CVE-2026-45759 No auth

    Suricata - Denial of Service

    Suricata < 7.0.16 and < 8.0.5 contains a denial of service caused by expensive parsing of large HTTP Content-Disposition headers during HTTP response processing, letting attackers cause excessive CPU usage remotely, exploit requires crafted HTTP traffic.

  • 7.5 /10 High
    CVE-2026-45747 PoC publicNo auth

    Suricata - Denial of Service

    Suricata < 7.0.16 contains a denial of service caused by dereferencing NULL certificate fields in Lua TLS certificate information helper, letting attackers crash the system by sending crafted TLS traffic, exploit requires Lua scripting on untrusted traffic.

  • 9.0 /10 Critical
    CVE-2026-44950

    libXfont2 - Buffer Overflow

    libXfont2 contains a heap buffer overflow caused by improper validation of cumulative glyph bitmap copy sizes in fs_read_glyphs(), letting a malicious font server overflow the destination buffer, exploit requires a malicious font server.

  • 8.0 /10 High
    CVE-2026-42807 No auth

    BoschSensortec COINES_SDK - Buffer Overflow

    BoschSensortec COINES_SDK 2.10 through 2.12.2 contains a heap-based buffer overflow caused by unvalidated packet length in the PC bridge protocol decoder, letting attackers cause denial of service or execute arbitrary code via malicious USB or BLE payloads.

  • 8.4 /10 High
    CVE-2026-42805 No auth

    Bosch Sensortec BHI385 SensorAPI - Buffer Overflow

    Bosch Sensortec BHI385 SensorAPI contains a stack-based buffer overflow caused by lack of bounds checking on message length in debug message parser, letting attackers cause DoS or execute arbitrary code via crafted sensor payload.

  • 7.6 /10 High
    CVE-2026-42804

    Bosch Sensortec BHI360 SensorAPI - Buffer Overflow

    Bosch Sensortec BHI360 SensorAPI (C-Library) up to commit d6b200416a contains a stack-based buffer overflow caused by unchecked memcpy of debug frame payload in bhi360_parse_debug_message(), letting locally or physically positioned attackers execute arbitrary code or cause denial of service via crafted debug frames.

  • 7.1 /10 High
    CVE-2026-4130 Auth required

    NI SystemLink - Information Disclosure

    NI SystemLink and NI SystemLink Server <= 2026 Q3 contain a sensitive information disclosure caused by storage of sensitive data in cleartext, letting local attackers obtain sensitive information, exploit requires local access.

  • 8.1 /10 High
    CVE-2026-4129 Auth required

    NI SystemLink - Broken Access Control

    NI SystemLink and NI SystemLink Server <= 2026 Q3 contain an improper access control vulnerability caused by insufficient restrictions on host OS files and directories, letting authenticated users with limited privileges access restricted files.

  • 9.8 /10 Critical
    CVE-2026-38626 No auth

    Garlic-Hub - SQL Injection

    Garlic-Hub v1.0.1 contains a sql injection caused by improper sanitization in src/Modules/Items/Repositories/ItemsRepository.php, letting attackers execute arbitrary SQL commands remotely, exploit requires crafted input.

  • 7.8 /10 High
    CVE-2026-2310 Auth required

    IBM webMethods Integration Server - XML External Entity Injection

    IBM webMethods Integration Server 11.1 contains an XML external entity injection caused by improper processing of XML data, letting remote attackers expose sensitive information or cause memory resource consumption, exploit requires crafted XML input.

  • 9.1 /10 Critical
    CVE-2026-19646 No auth

    IBM Common Licensing Agent - Open Redirect

    IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 contain an open redirect caused by improper validation of the HTTP Host header, letting remote attackers redirect users to arbitrary domains, exploit requires crafted HTTP requests.

  • 7.7 /10 High
    CVE-2026-19584 Auth required

    Velociraptor - Server-Side Template Injection

    Velociraptor contains a server-side template injection caused by interpolation of notebook cell content without ACL checks during backup restoration, letting users with NOTEBOOK_EDITOR permission execute elevated VQL queries, exploit requires NOTEBOOK_EDITOR permission.

  • 9.9 /10 Critical
    CVE-2026-19583 Auth required

    Velociraptor - Broken Access Control

    Velociraptor contains a broken access control vulnerability caused by missing permission checks on client monitoring artifacts, letting users schedule restricted artifacts like Linux.Sys.BashShell, exploit requires scheduling privileges.