Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
11502
Critical
2091
CISA KEV
92
Public PoC
393

Most common types

  • Broken Access Control 1499
  • Remote Code Execution 1456
  • Privilege Escalation 1227
  • Authentication Bypass 940
  • Denial of Service 799

Published per day, last 14 days

8 Oct Critical Other 21 Oct

Source: public CVE records (NVD, CISA KEV) · last published 21 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 698 of 767

  • 7.5 /10 High
    CVE-2026-88289 No auth

    GeoVision GV-LPC2211 - Denial of Service

    GeoVision GV-LPC2211 V1.14 (260903) contains a stack buffer overflow caused by improper validation of variable-length fields in VLSVR request handlers, letting unauthenticated remote attackers cause a denial of service by crashing the service.

  • 7.5 /10 High
    CVE-2026-88287 No auth

    GeoVision GV-LPC2211 - Denial of Service

    GeoVision GV-LPC2211 V1.13 contains a buffer overflow caused by unbounded Scopes tokens in unauthenticated ONVIF WS-Discovery Probe requests, letting remote attackers crash the discovery process.

  • 7.5 /10 High
    CVE-2026-88286 No auth

    GeoVision GV-LPC2211 - Denial of Service

    GeoVision GV-LPC2211 V1.13 contains a denial of service vulnerability caused by improper management of PTZ connection state, letting unauthenticated remote clients block new PTZ connections, exploit requires network access.

  • 9.4 /10 Critical
    CVE-2026-88285 No auth

    GeoVision GV-LPC2211 - Broken Access Control

    GeoVision GV-LPC2211 V1.13 contains a broken access control vulnerability caused by an unauthenticated network-accessible PTZ control service, letting remote attackers retrieve PTZ information and issue PTZ or raw serial commands, exploit requires no authentication.

  • 7.2 /10 High
    CVE-2026-88282 Auth required

    GeoVision GV-LPC2211 - Command Injection

    GeoVision GV-LPC2211 V1.13 contains a command injection caused by administrator-controlled FTP username with shell metacharacters executed during FTP-account update, letting attackers execute arbitrary root commands, exploit requires administrator privileges.

  • 9.8 /10 Critical
    CVE-2026-88278

    GeoVision GV-LPC2211 - Authentication Bypass

    GeoVision GV-LPC2211 V1.13 contains a replay attack vulnerability caused by failure to enforce WS-Security UsernameToken freshness or nonce reuse protection, letting attackers replay captured PasswordDigest tokens for ONVIF operations, exploit requires captured token.

  • 8.8 /10 High
    CVE-2026-88277 Auth required

    GeoVision GV-LPC2211 - Command Injection

    GeoVision GV-LPC2211 V1.13 contains a command injection caused by improper sanitization of ConsumerReference.Address in ONVIF interface, letting authenticated users execute arbitrary commands as root.

  • 7.2 /10 High
    CVE-2026-88276 Auth required

    GeoVision GV-LPC2211 - Command Injection

    GeoVision GV-LPC2211 V1.13 contains a command injection caused by administrator-controlled WEP key values containing shell syntax, letting attackers execute arbitrary commands as root, exploit requires administrator privileges.

  • 7.2 /10 High
    CVE-2026-88275 Auth required

    GeoVision GV-LPC2211 - Command Injection

    GeoVision GV-LPC2211 V1.13 contains a command injection caused by administrator-controlled WPA-PSK with shell syntax in wireless configuration, letting attackers execute arbitrary commands as root, exploit requires administrator privileges.

  • 7.2 /10 High
    CVE-2026-88274 Auth required

    GeoVision GV-LPC2211 - Command Injection

    GeoVision GV-LPC2211 V1.13 contains a command injection caused by administrator-controlled wireless SSID with shell syntax, letting attackers execute arbitrary commands as root, exploit requires administrator privileges.

  • 7.2 /10 High
    CVE-2026-88273 Auth required

    GeoVision GV-LPC2211 - Command Injection

    GeoVision GV-LPC2211 V1.13 contains a command injection caused by administrator-controlled PPPoE username escaping shell configuration, letting attackers execute arbitrary commands as root, exploit requires administrator privileges.

  • 7.2 /10 High
    CVE-2026-88272 Auth required

    GeoVision GV-LPC2211 - Command Injection

    GeoVision GV-LPC2211 V1.13 contains a command injection caused by administrator-controlled username with shell metacharacters executed as root commands during deletion, letting attackers execute arbitrary root commands, exploit requires administrator privileges.

  • 8.8 /10 High
    CVE-2026-88271 Auth required

    GeoVision GV-LPC2211 - Broken Access Control

    GeoVision GV-LPC2211 V1.13 contains a broken access control vulnerability caused by improper SSVR handling, letting guest users overwrite device configuration and replace the administrator password, exploit requires guest access.

  • Critical
    CVE-2026-88062 CISA KEV

    OmniRoute - Remote Code Execution

    OmniRoute <= 3.8.49 contains a remote code execution caused by insufficient validation of interpreter arguments in the POST /api/acp/agents endpoint, letting remote attackers execute arbitrary code, exploit requires anonymous access when requireLogin is false or management session/API key when true.

  • 9.1 /10 Critical
    CVE-2026-88056 PoC public

    Angular - Server-Side Request Forgery

    Angular < 20.3.30, 21.2.22, 22.1.4 contains a server-side request forgery caused by improper URL trimming in resolveUrl and parseUrl utilities, letting attackers cause SSRF and credential disclosure, exploit requires sensitive server-side credentials attached to requests.