Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 13360
- Critical
- 2486
- CISA KEV
- 125
- Public PoC
- 437
Most common types
- Broken Access Control 1691
- Remote Code Execution 1609
- Privilege Escalation 1307
- Authentication Bypass 1121
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 782 of 891
- 8.5 /10 HighCVE-2026-57126 Auth required
PraisonAI praisonaiagents - Server Side Request Forgery
PraisonAI praisonaiagents < 1.6.58 contains a server side request forgery caused by improper hostname resolution in SpiderTools._validate_url, letting attackers bypass SSRF policy and access internal resources, exploit requires attacker-controlled hostname resolving to restricted IPs.
- 9.8 /10 CriticalCVE-2026-57125 No auth
PraisonAI - Command Injection
PraisonAI < 4.6.59 and praisonaiagents < 1.6.59 contain a command injection caused by unauthenticated POST /api/v1/runs accepting attacker-controlled agent_yaml and bypassing approval checks, letting remote attackers execute arbitrary OS commands without credentials or interaction.
- 9.8 /10 CriticalCVE-2026-57124
PraisonAI - Command Injection
PraisonAI < 4.6.59 contains a command injection caused by unauthenticated POST /api/mcp/connect accepting caller-controlled command and args, letting unauthenticated remote attackers execute commands as the UI service account, exploit requires network access to the UI host.
- 9.8 /10 CriticalCVE-2026-57123 No auth
PraisonAI praisonaiagents - Broken Access Control
PraisonAI praisonaiagents < 1.6.59 contains a broken access control caused by missing authentication and origin-validation in ToolsMCPServer routes, letting any reachable client invoke registered tools, exploit requires network access.
- 8.6 /10 HighCVE-2026-57122
PraisonAI - Authentication Bypass
PraisonAI < 4.6.59 contains a broken authentication caused by missing HMAC signature verification in WhatsApp and Linear bot webhook handlers, letting remote unauthenticated clients forge messages and disrupt bot processing, exploit requires access to webhook route.
- 7.5 /10 HighCVE-2026-57119 No auth
PraisonAI - Path Traversal
PraisonAI < 4.6.59 contains a path traversal caused by lack of workspace boundary checks in the unauthenticated Jobs API at POST /api/v1/runs, letting remote attackers access sensitive files, exploit requires no authentication.
- 7.3 /10 HighCVE-2026-56839 Auth required
PraisonAI - Path Traversal
PraisonAI < 4.6.59 contains a path traversal caused by uninitialized workspace root in CODE_TOOLS wrappers, letting attackers read and modify files outside intended directories, exploit requires application exposing code helpers before workspace set.
- 8.8 /10 HighCVE-2026-55416 Auth required
Pimcore - SQL Injection
Pimcore < 11.5.19, 12.3.10, and 2026.1.6 contains an SQL injection caused by improper sanitization of SQL fragments in Custom Reports configuration, letting authenticated users with reports_config permission manipulate database queries, exploit requires authenticated user with reports_config permission.
- 7.7 /10 HighCVE-2026-55253 Auth required
LangChain MongoDB - NoSQL Injection
LangChain MongoDB prior to langgraph-checkpoint-mongodb 0.3.0 and langgraph-store-mongodb 0.4.0 contains a NoSQL injection caused by improper filtering of keys prefixed with $ in filter dictionaries, letting authenticated attackers bypass tenant isolation and access other tenants' data, exploit requires authenticated caller controlling filter arguments.
- 9.8 /10 CriticalCVE-2026-55209 No auth
resdata - Buffer Overflow
resdata < 6.2.9 contains a buffer overflow and out-of-bounds read caused by insufficient validation of numeric fields and array indexes in GRDECL file parsing, letting remote attackers cause memory corruption or denial of service, exploit requires untrusted GRDECL file input.
- 7.5 /10 HighCVE-2026-55091 No auth
flat-to-nested - Prototype Pollution
flat-to-nested < 1.1.2 contains a prototype pollution caused by using attacker-controlled id and parent fields as keys in internal objects, letting attackers corrupt application logic or cause denial of service, exploit requires attacker-controlled input to convert().
- 8.5 /10 HighCVE-2026-55072 Auth required
Pimcore - SQL Injection
Pimcore < 2026.1.5 contains an SQL injection caused by incomplete validation of ClassDefinition UID in Block field loading, letting authenticated users with objects permission read or modify database tables.
- 7.5 /10 HighCVE-2026-54632
SIPSorcery - Denial of Service
SIPSorcery < 10.0.9 contains a denial of service caused by insufficient length checks in RTP and STUN attribute parsing, letting remote attackers terminate active RTP or WebRTC sessions by sending malformed packets, exploit requires access to ephemeral RTP/ICE port.
- 7.5 /10 HighCVE-2026-54629 No auth
Anyquery - Information Disclosure
Anyquery < 0.4.5 contains an information disclosure vulnerability caused by unauthenticated access to file-backed SQLite virtual table modules via MySQL-compatible server port, letting remote attackers read files accessible to the server process.
- 8.6 /10 HighCVE-2026-54628 No auth
Anyquery - Server Side Request Forgery
Anyquery < 0.4.5 contains a server-side request forgery caused by exposing URL-capable SQLite virtual table modules via unauthenticated MySQL-compatible port, letting remote attackers access internal network resources, exploit requires no authentication.