Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 798 of 891

  • 8.1 /10 High
    CVE-2026-89667 No auth

    Linux Kernel - Race Condition

    Linux kernel contains a race condition in nfsd filecache caused by improper synchronization of shrinker, GC worker, and fsnotify/lease callbacks with per-net shutdown, letting attackers cause resource leaks, exploit requires concurrent operations.

  • 8.2 /10 High
    CVE-2026-89665 No auth

    Linux Kernel - Improper Input Validation

    Linux kernel contains a vulnerability in NFSv2 SETATTR/CREATE where out-of-range useconds values cause time value corruption due to integer overflow in sattr decoder, letting remote attackers cause improper time attribute handling, exploit requires crafted NFSv2 requests.

  • 7.5 /10 High
    CVE-2026-89664 No auth

    Linux Kernel NFSd - Resource Leak

    Linux kernel contains a resource leak vulnerability in NFS server (nfsd) caused by missing release of OPEN-decoded POSIX ACLs in nfsd4 operations, letting attackers cause resource leaks, exploit requires sending malformed OPEN compound requests with valid POSIX ACL attributes.

  • 8.8 /10 High
    CVE-2026-89663 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in nfsd revoke paths caused by improper handling of copy-notify stateids references, letting attackers cause memory corruption or kernel crashes, exploit requires concurrent revoke and state management operations.

  • 9.8 /10 Critical
    CVE-2026-89662

    Linux Kernel NFSD - Use After Free

    Linux kernel NFSD contains a use-after-free vulnerability caused by improper lock owner reference handling during client teardown in __destroy_client(), letting attackers cause NULL dereference and potential denial of service, exploit requires client teardown conditions.

  • 9.8 /10 Critical
    CVE-2026-89660 No auth

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in NFSD during admin state revocation caused by improper client pointer handling in nfs4_client stateid, letting attackers cause memory corruption, exploit requires race condition during client teardown.

  • 9.8 /10 Critical
    CVE-2026-89659 No auth

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in NFSD delegation revoke caused by improper client reference handling in nfs4_laundromat, letting attackers cause memory corruption, exploit requires client delegation timeout.

  • 9.8 /10 Critical
    CVE-2026-89658 No auth

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in NFSD during NFSv4.0 revoked-state cleanup caused by improper client reference handling, letting attackers cause memory corruption, exploit requires race condition during client teardown.

  • 7.5 /10 High
    CVE-2026-89657 No auth

    Linux Kernel libceph - Denial of Service

    Linux kernel libceph contains a denial of service caused by improper validation of OSD extent maps in osd_sparse_read(), letting malicious authenticated Ceph OSD peers crash kernel Ceph clients via malformed sparse-read replies, exploit requires authenticated malicious OSD peer.

  • 9.8 /10 Critical
    CVE-2026-89656

    Linux kernel libceph - Out of Bounds Write

    Linux kernel libceph contains an out-of-bounds write caused by mismatched CRUSH bucket ids in crush_decode(), letting attackers trigger memory corruption, exploit requires a malformed CRUSH map.

  • 9.8 /10 Critical
    CVE-2026-89655 No auth

    Linux Kernel ceph - Use After Free

    Linux kernel ceph contains a use-after-free vulnerability in __kick_flushing_caps() caused by accessing freed cf entries during list iteration, letting attackers cause memory corruption or denial of service, exploit requires race condition timing.

  • 9.8 /10 Critical
    CVE-2026-89654

    Linux kernel ceph - Use After Free

    Linux kernel ceph contains a use-after-free vulnerability in check_new_map() caused by missing reference counting on session objects during mutex unlock, letting concurrent threads access freed memory, exploit requires concurrent session teardown.

  • 9.8 /10 Critical
    CVE-2026-89653 No auth

    Linux Kernel - Out of Bounds Read/Write

    Linux kernel contains a buffer overflow caused by unchecked export_targets ranks in ceph mdsmap decode, letting attackers cause memory corruption by providing ranks >= CEPH_MAX_MDS, exploit requires crafted mdsmap data.

  • 9.8 /10 Critical
    CVE-2026-89652

    Linux kernel Ceph - Buffer Overflow

    Linux kernel Ceph contains a buffer overflow caused by unchecked dname_len in ceph_get_name and __get_snap_name functions, letting malicious or compromised Ceph MDS cause out-of-bounds write, exploit requires CephFS mount re-exported over NFS.

  • 9.8 /10 Critical
    CVE-2026-89651 No auth

    Linux Kernel ceph - Out-of-Bounds Read

    Linux kernel contains an out-of-bounds read vulnerability in ceph handle_session() due to missing bounds checks on MDSCapAuth path and fs_name decoding, letting malicious MDS crash the client during session setup without user interaction.