Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 784 of 891

  • 7.5 /10 High
    CVE-2026-50276 No auth

    Datadog dd-trace-rb - Denial of Service

    Datadog dd-trace-rb < 2.32.0 contains a denial of service caused by lack of enforcement of baggage size limits during W3C baggage extraction, letting remote unauthenticated attackers cause unbounded CPU and memory consumption, exploit requires sending crafted baggage HTTP headers.

  • 7.5 /10 High
    CVE-2026-50270 No auth

    Datadog dd-trace-java - Denial of Service

    Datadog dd-trace-java < 1.62.0 contains a denial of service caused by lack of enforcement of baggage size limits during W3C baggage extraction, letting remote unauthenticated attackers cause unbounded CPU and memory consumption, exploit requires sending crafted baggage HTTP headers.

  • 9.1 /10 Critical
    CVE-2026-50006 No auth

    Anyquery - SQL Injection

    Anyquery < 0.4.5 contains an unrestricted ATTACH DATABASE vulnerability in its MySQL-compatible server port, letting remote attackers create or overwrite arbitrary files, causing filesystem integrity loss and denial of service, exploit requires network access.

  • 7.7 /10 High
    CVE-2026-47701 Auth required

    OpenTelemetry Operator - Information Disclosure

    OpenTelemetry Operator < 0.152.0 contains an information disclosure caused by improper handling of ServiceMonitor bearerTokenFile in TargetAllocator, letting tenants with ServiceMonitor creation/update permissions disclose Collector service-account tokens, exploit requires Collector service-account token or sensitive file mounted and network access to target endpoint.

  • 7.3 /10 High
    CVE-2026-47253 Auth required

    Anyquery - Path Traversal

    Anyquery < 0.4.5 contains a path traversal caused by insufficient validation of the plugin parameter in clear_plugin_cache function, letting low-privileged bearer-token holders delete arbitrary writable directories, exploit requires bearer-token authentication.

  • 8.8 /10 High
    CVE-2026-43815

    Apple macOS - Buffer Overflow

    Apple macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6 contain a buffer overflow caused by insufficient bounds checking in AFPFS connection, letting attackers cause kernel memory corruption by connecting to a malicious AFPFS server, exploit requires attacker to control AFPFS server.

  • 9.1 /10 Critical
    CVE-2026-43790 No auth

    Apple macOS - Denial of Service

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain a memory corruption vulnerability caused by improper memory handling, letting remote attackers cause system termination or kernel memory corruption, exploit requires network access.

  • 7.5 /10 High
    CVE-2026-43789 No auth

    Apple macOS - Information Disclosure

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain an information disclosure vulnerability caused by insufficient sandbox restrictions, letting apps access user-sensitive data, exploit requires app execution.

  • 7.8 /10 High
    CVE-2026-43786 PoC publicAuth required

    Apple macOS - Privilege Escalation

    Apple macOS Golden Gate 27, Sequoia 15.8, and Tahoe 26.7 contain a privilege escalation caused by missing entitlement checks, letting apps gain root privileges, exploit requires app execution.

  • 7.8 /10 High
    CVE-2026-43783 PoC publicAuth required

    Apple macOS Tahoe - Privilege Escalation

    Apple macOS Tahoe 26.6 contains a race condition caused by improper locking, letting malicious apps gain root privileges, exploit requires malicious app execution.

  • 7.8 /10 High
    CVE-2026-43702 No auth

    Apple - Buffer Overflow

    Apple iOS 26.6, 26.7, iPadOS 26.6, 26.7, macOS Sequoia 15.8, macOS Tahoe 26.6, 26.7, tvOS 26.6, and watchOS 26.6 contain a buffer overflow caused by processing a maliciously crafted video file, letting attackers cause app termination or memory corruption, exploit requires crafted video file.

  • 7.1 /10 High
    CVE-2026-43697 No auth

    Apple macOS - Out of Bounds Read

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain an out-of-bounds read caused by improper bounds checking when processing maliciously crafted 3D files, letting attackers cause memory corruption, exploit requires crafted 3D file.

  • 8.8 /10 High
    CVE-2026-43692 No auth

    Apple macOS - Remote Code Execution

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain a remote code execution caused by insufficient input sanitization, letting remote attackers cause app termination or execute arbitrary code, exploit requires crafted input.

  • 7.8 /10 High
    CVE-2026-43691 Auth required

    Apple macOS - Privilege Escalation

    Apple macOS Golden Gate 27, macOS Sequoia 15.8, and macOS Tahoe 26.7 contain a privilege escalation caused by a path handling issue due to insufficient validation, letting local apps gain root privileges, exploit requires local app execution.

  • 7.8 /10 High
    CVE-2026-43689 Auth required

    Apple iOS & macOS - Privilege Escalation

    Apple iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, and visionOS 27 contain a privilege escalation caused by insufficient permissions restrictions, letting malicious apps gain root privileges, exploit requires malicious app execution.