Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 7 of 891

  • 7.5 /10 High
    CVE-2026-20557 No auth

    Modem - Privilege Escalation

    Modem contains an out of bounds write caused by missing bounds check, letting remote attackers escalate privileges if UE connects to a rogue base station, exploit requires connection to rogue base station.

  • 7.5 /10 High
    CVE-2026-20556 No auth

    Modem - Privilege Escalation

    Modem contains an out of bounds write caused by missing bounds check, letting remote attackers escalate privileges if UE connects to a rogue base station, exploit requires no additional privileges or user interaction.

  • 7.1 /10 High
    CVE-2026-20554 No auth

    Modem - Privilege Escalation

    Modem contains a privilege escalation caused by missing bounds check, letting remote attackers escalate privileges if a UE connects to a rogue base station, exploit requires user interaction.

  • 7.5 /10 High
    CVE-2026-20549 No auth

    Modem - Privilege Escalation

    Modem contains an out of bounds write caused by improper input validation, letting remote attackers escalate privileges when a UE connects to a rogue base station, exploit requires no additional privileges or user interaction.

  • 7.5 /10 High
    CVE-2026-20548 No auth

    Modem - Privilege Escalation

    Modem contains an out of bounds write caused by an integer overflow, letting remote attackers escalate privileges when a UE connects to a rogue base station, exploit requires no additional privileges or user interaction.

  • 7.5 /10 High
    CVE-2026-20547 No auth

    Modem - Privilege Escalation

    Modem contains an out of bounds write caused by missing bounds check, letting remote attackers escalate privileges when a UE connects to a rogue base station, exploit requires no additional privileges or user interaction.

  • 7.5 /10 High
    CVE-2026-20546 No auth

    Modem - Privilege Escalation

    Modem contains an out of bounds write caused by incorrect bounds check, letting remote attackers escalate privileges if UE connects to a rogue base station, exploit requires no additional privileges or user interaction.

  • 7.5 /10 High
    CVE-2026-20545 No auth

    Modem - Privilege Escalation

    Modem contains an out of bounds write caused by missing bounds check, letting remote attackers escalate privileges when a UE connects to a rogue base station, exploit requires no additional privileges or user interaction.

  • 7.5 /10 High
    CVE-2026-20499 No auth

    Modem - Privilege Escalation

    Modem contains an out of bounds write caused by missing bounds check, letting remote attackers escalate privileges if UE connects to a rogue base station, exploit requires no additional privileges or user interaction.

  • 8.8 /10 High
    CVE-2026-18199 Auth required

    Zohocorp ManageEngine Password Manager Pro & PAM360 - Remote Code Execution

    Zohocorp ManageEngine Password Manager Pro < 13236 and PAM360 < 8601 contain an authenticated remote code execution caused by improper input handling, letting authenticated attackers execute arbitrary code remotely, exploit requires authentication.

  • 7.5 /10 High
    CVE-2026-120752 Auth required

    PyMuPDF - Buffer Overflow

    PyMuPDF < 2.0 contains a stack-based buffer overflow caused by copying caller-supplied callout points into a fixed three-element stack array in JM_set_annot_callout_line, letting attackers crash the process or execute code by supplying four or more points via Page.add_freetext_annot.

  • 7.5 /10 High
    CVE-2026-120596 No auth

    Ethernut Nut/OS - Denial of Service

    Ethernut Nut/OS <= 5.1 contains a denial-of-service caused by a malformed TCP option with zero length in NutTcpInputOptions, letting unauthenticated remote attackers block TCP services, exploit requires sending crafted TCP segment.

  • 7.2 /10 High
    CVE-2026-120487 Auth required

    LaraDashboard - Broken Access Control

    LaraDashboard < 1.4.5 contains a broken access control vulnerability in SettingPolicy::manageCoreUpgrades(), letting non-Superadmin administrators with settings.edit access Superadmin-only core-upgrade operations, exploit requires settings.edit privilege.

  • 8.8 /10 High
    CVE-2026-120461 Auth required

    Jpom - Broken Access Control

    Jpom <= 2.11.12 contains a broken access control caused by lack of workspace filtering in POST /node/ssh_command/batch, letting authenticated users with SSH command execute permission run commands on other workspaces' SSH hosts.

  • 8.8 /10 High
    CVE-2026-120460 Auth required

    Jpom - Broken Access Control

    Jpom <= 2.11.12 contains a broken access control caused by cross-workspace authorization bypass via foreign Docker asset IDs, letting authenticated users with Docker permissions manage other workspaces' Docker hosts.