Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 676 of 677

  • 7.8 /10 High
    CVE-2026-28611 Auth required

    NfcService - Privilege Escalation

    NfcService contains a local privilege escalation caused by missing permission checks in multiple functions of NfcService.java, letting local attackers hijack silent payment sessions without user interaction.

  • 8.8 /10 High
    CVE-2026-28609 PoC publicAuth required

    MatroskaExtractor - Remote Code Execution

    MatroskaExtractor contains an out-of-bounds write caused by improper casting in MatroskaExtractor.cpp, letting remote attackers execute arbitrary code without additional privileges, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28607 Auth required

    Generic Software - Privilege Escalation

    A software contains a background activity launch bypass caused by a confused deputy issue in multiple functions, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 9.8 /10 Critical
    CVE-2026-28606 No auth

    AdapterService - Privilege Escalation

    AdapterService contains a privilege escalation caused by a logic error in handleBondStateChanged, letting remote attackers escalate privileges without user consent, exploit requires no user interaction.

  • 7.5 /10 High
    CVE-2026-28604 Auth required

    Generic - Use After Free

    Affected software contains a use after free vulnerability caused by a race condition in multiple locations, letting remote attackers execute arbitrary code without additional privileges, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28603 Auth required

    AppRestrictionsFragment - Privilege Escalation

    AppRestrictionsFragment contains a local privilege escalation caused by confused deputy leading to read/write access to private files, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28602 Auth required

    ClipboardService - Privilege Escalation

    ClipboardService contains a local privilege escalation caused by a logic error in setClipboardAccessNotificationsEnabledForUser, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28600 Auth required

    PaymentDefaultDialog - Privilege Escalation

    PaymentDefaultDialog.java contains a confused deputy vulnerability in onCreate, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28599 Auth required

    ActivityManagerService - Intent Redirection Bypass

    ActivityManagerService contains an intent redirection bypass caused by a logic error in addCreatorToken, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28594 Auth required

    Affected product - Privilege Escalation

    Affected product contains a use after free caused by a logic error in multiple locations, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28593 Auth required

    SettingsFragment - Privilege Escalation

    SettingsFragment contains a local privilege escalation caused by misleading or insufficient UI in getItemList, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28590 Auth required

    Generic Product - Authentication Bypass

    Affected product contains an improper encryption key validation caused by a logic error in multiple locations, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28583 Auth required

    camera_metadata.c - Out of Bounds Write

    camera_metadata.c contains an out of bounds write caused by a logical error in validate_camera_metadata_structure, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.8 /10 High
    CVE-2026-28572 Auth required

    InstallLaunch.kt - Clickjacking

    InstallLaunch.kt contains a tapjacking vulnerability caused by misleading UI due to overlay attack, letting local attackers escalate privileges without additional execution rights, exploit requires no user interaction.

  • 7.4 /10 High
    CVE-2026-19651 No auth

    IBM Enterprise Build of Quarkus - Authorization Bypass

    IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 contains an authorization bypass caused by incorrect mapping of values to untrusted URL query parameters, letting attackers bypass authorization, exploit requires crafted URL query parameters.