Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 640 of 677
- 7.8 /10 HighCVE-2026-82005 No auth
Adobe Photoshop Desktop - Remote Code Execution
Adobe Photoshop Desktop contains an out-of-bounds write vulnerability caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.
- 10.0 /10 CriticalCVE-2026-82004 No auth
Adobe Campaign Classic - OS Command Injection
Adobe Campaign Classic contains an OS Command Injection caused by improper neutralization of special elements, letting attackers execute arbitrary code in the context of the current user, exploit requires no user interaction.
- 8.8 /10 HighCVE-2026-81996 Auth required
Acrobat Reader - Broken Access Control
Acrobat Reader contains an incorrect authorization vulnerability caused by improper access control, letting low-privileged attackers escalate privileges, exploit requires no user interaction.
- 8.2 /10 HighCVE-2026-81994 No auth
Acrobat Reader - Prototype Pollution
Acrobat Reader contains a prototype pollution vulnerability caused by improperly controlled modification of object prototype attributes, letting attackers read arbitrary files, exploit requires victim to open a malicious file.
- 7.8 /10 HighCVE-2026-81992 No auth
Acrobat Reader - Remote Code Execution
Acrobat Reader contains a heap-based buffer overflow caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.
- 7.8 /10 HighCVE-2026-81990 No auth
Acrobat Reader - Use After Free
Acrobat Reader contains a use after free vulnerability caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.
- 7.8 /10 HighCVE-2026-81989 No auth
Acrobat Reader - Use After Free
Acrobat Reader contains a use after free vulnerability caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.
- 7.8 /10 HighCVE-2026-81988 No auth
Acrobat Reader - Use After Free
Acrobat Reader contains a use after free vulnerability caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.
- 7.8 /10 HighCVE-2026-81987 No auth
Acrobat Reader - Remote Code Execution
Acrobat Reader contains an integer overflow caused by improper handling of input, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.
- 7.8 /10 HighCVE-2026-81986 No auth
Acrobat Reader - Use After Free
Acrobat Reader contains a use after free vulnerability caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.
- 7.8 /10 HighCVE-2026-81985 No auth
Acrobat Reader - Use After Free
Acrobat Reader contains a use after free vulnerability caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.
- 7.8 /10 HighCVE-2026-81983 No auth
Acrobat Reader - Remote Code Execution
Acrobat Reader contains an out-of-bounds write vulnerability caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.
- 7.8 /10 HighCVE-2026-81981 No auth
Acrobat Reader - Remote Code Execution
Acrobat Reader contains an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user, exploit requires victim to open a malicious file.
- 7.8 /10 HighCVE-2026-81980 No auth
Acrobat Reader - Remote Code Execution
Acrobat Reader contains an out-of-bounds write vulnerability caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.
- 7.8 /10 HighCVE-2026-81979 No auth
Acrobat Reader - Remote Code Execution
Acrobat Reader contains an out-of-bounds write vulnerability caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.