Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 644 of 677
- 8.8 /10 HighCVE-2026-80080 No auth
Microsoft Office Word - Remote Code Execution
Microsoft Office Word contains a double free vulnerability caused by improper memory management, letting unauthorized attackers execute code remotely, exploit requires network access.
- 8.8 /10 HighCVE-2026-80077 No auth
Remote Desktop Client - Remote Code Execution
Remote Desktop Client contains a heap-based buffer overflow caused by improper memory handling, letting unauthorized attackers execute code remotely, exploit requires network access.
- 7.8 /10 HighCVE-2026-80075 Auth required
Windows Work Folders - Privilege Escalation
Windows Work Folders contains a heap-based buffer overflow caused by improper memory handling, letting authorized local attackers elevate privileges, exploit requires local access with authorization.
- 8.8 /10 HighCVE-2026-80074 No auth
Remote Desktop Client - Remote Code Execution
Remote Desktop Client contains a heap-based buffer overflow caused by improper memory handling, letting unauthorized attackers execute code remotely, exploit requires network access.
- 7.8 /10 HighCVE-2026-79909 No auth
Acrobat Reader - Use After Free
Acrobat Reader contains a use after free vulnerability caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.
- 7.8 /10 HighCVE-2026-79908 No auth
Acrobat Reader - Remote Code Execution
Acrobat Reader contains an out-of-bounds write vulnerability caused by improper memory handling, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.
- 7.8 /10 HighCVE-2026-79907 No auth
Acrobat Reader - Remote Code Execution
Acrobat Reader contains a double free vulnerability caused by improper memory management, letting attackers execute arbitrary code in the context of the current user, exploit requires victim to open a malicious file.
- 8.8 /10 HighCVE-2026-78834 Auth required
CMSimple - Remote Code Execution
CMSimple 5.22 contains a server-side code execution caused by crafted external or uploaded text content in the CoAuthors plugin content import feature, letting authenticated low-privileged users execute code on the server, exploit requires low-privileged user authentication with content modification rights.
- 7.3 /10 HighCVE-2026-78627 Auth required
Okta Hyperdrive Integration - Information Disclosure
Okta Hyperdrive Integration installer contains an information disclosure vulnerability caused by OAuth client secret being logged in plaintext in installer logs and process command line, letting authenticated local users access sensitive credentials, exploit requires local authentication.
- 8.1 /10 HighCVE-2026-78626 Auth required
Okta Access Gateway - Authorization Bypass
Okta Access Gateway contains an authorization bypass caused by improper input sanitization and regex evaluation in Protected Rule authorization checks, letting attackers bypass authorization when Protected Rule policies are configured.
- 7.7 /10 HighCVE-2026-78623
Okta Access Gateway - SQL Injection
Okta Access Gateway contains a SQL injection caused by unsanitized SAML assertion values interpolated into database queries in advanced mode datastore configuration, letting attackers execute unintended SQL commands, exploit requires advanced mode datastore configuration.
- 7.5 /10 HighCVE-2026-78574 Auth required
Okta Hyperdrive Integration - Unrestricted File Upload
Okta Hyperdrive Integration plugin contains an insecure assembly loading vulnerability caused by loading assemblies from a registry path without integrity or signature verification, letting attackers execute unverified code in the host process or elevated installer context, exploit requires attacker control over registry entries.
- 8.8 /10 HighCVE-2026-78526 No auth
Microsoft Office Word - Remote Code Execution
Microsoft Office Word contains a heap-based buffer overflow caused by improper memory handling, letting unauthorized attackers execute code remotely, exploit requires network access.
- 8.8 /10 HighCVE-2026-78525 No auth
Microsoft Office Outlook - Remote Code Execution
Microsoft Office Outlook contains a use after free vulnerability that allows unauthorized attackers to execute code remotely over a network, exploit requires network access.
- 8.8 /10 HighCVE-2026-78524 No auth
Microsoft Office - Remote Code Execution
Microsoft Office contains an out-of-bounds write vulnerability allowing unauthorized attackers to execute code remotely over a network, exploit requires network access.