Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 13360
- Critical
- 2486
- CISA KEV
- 125
- Public PoC
- 437
Most common types
- Broken Access Control 1691
- Remote Code Execution 1609
- Privilege Escalation 1307
- Authentication Bypass 1121
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 799 of 891
- 9.1 /10 CriticalCVE-2026-89650
Linux Kernel Ceph - Out-of-Bounds Read
Linux kernel Ceph component (info_v 2 and 3) contains an out-of-bounds read caused by missing bounds check on num_export_targets in ceph_mdsmap_decode(), letting malicious or compromised Ceph monitors trigger kernel memory read, exploit requires a malicious or compromised Ceph monitor or on-path attacker on unsigned messenger session.
- 9.1 /10 CriticalCVE-2026-89649 No auth
Linux kernel CephFS - Information Disclosure
Linux kernel CephFS contains an information disclosure vulnerability caused by missing bounds check on the last xattr value length in __build_xattrs(), letting a malicious metadata server disclose adjacent kernel heap bytes to local users via getxattr(2), exploit requires local user access.
- 7.5 /10 HighCVE-2026-89648
Linux Kernel Ceph - Denial of Service
Linux kernel Ceph contains a denial of service caused by unbounded delegated inode count handling in ceph_parse_deleg_inos(), letting a malicious or compromised MDS cause resource exhaustion, exploit requires attacker to control MDS.
- 7.5 /10 HighCVE-2026-89647 No auth
Linux Kernel - Denial of Service
Linux kernel contains a denial of service caused by a busy loop in ceph_trim_dentries() due to repeated re-queuing when no progress is possible, letting attackers cause high CPU usage, exploit requires no special privileges.
- 7.8 /10 HighCVE-2026-89646 Auth required
Linux Kernel Ceph - Broken Access Control
Linux kernel contains a broken access control vulnerability in Ceph where leaked inode references occur on writeback abort during umount, caused by failure to release wrbuffer claims, letting attackers cause inode eviction failure, exploit requires umount operation.
- 9.8 /10 CriticalCVE-2026-89643
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in audit_del_rule() caused by improper handling of tree references during fsnotify rule autoremove, letting attackers cause system instability or denial of service, exploit requires triggering fsnotify autoremove.
- 7.8 /10 HighCVE-2026-89641 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in cifs_file_set_size() caused by improper handling of tcon after cifsFileInfo_put(), letting attackers cause memory corruption or denial of service, exploit requires writable file handle.
- 7.1 /10 HighCVE-2026-89640 Auth required
Linux Kernel - Data Tampering & Denial of Service
Linux kernel contains a vulnerability in cifs_remap_file_range() caused by loff_t underflow when len is 0, letting attackers cause file range corruption, exploit requires crafted FSCTL_DUPLICATE_EXTENTS_TO_FILE request.
- 7.1 /10 HighCVE-2026-89639 Auth required
Linux Kernel - Cache Invalidation Issue in CIFS Truncate
Linux kernel contains a cache invalidation issue in cifs_do_truncate() caused by improper cache handling without i_rwsem, letting attackers cause stale cached data to be served, exploit requires file truncation with O_TRUNC flag.
- 7.8 /10 HighCVE-2026-89638 Auth required
Linux Kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability caused by improper clearing of setuid/setgid bits on write with cifsacl/modefromsid/posix extensions, letting attackers retain setuid/setgid bits unexpectedly, exploit requires usage of affected CIFS mount options.
- 9.8 /10 CriticalCVE-2026-89637 No auth
Linux kernel smb client - Use After Free
Linux kernel smb client contains a use-after-free and buffer leak caused by improper handling of malformed secondary TRANSACT2 responses in cifs_check_trans2(), letting attackers cause memory corruption, exploit requires crafted malformed secondary T2 response.
- 9.8 /10 CriticalCVE-2026-89636 No auth
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by ce->tgthint pointing to freed cache_dfs_tgt structures in smb client free_tgts(), letting attackers cause memory corruption or denial of service, exploit requires triggering smb client target list free.
- 9.8 /10 CriticalCVE-2026-89635 No auth
Linux Kernel ksmbd - Use After Free
Linux kernel ksmbd contains a use-after-free vulnerability caused by rebinding oplocks of all detached durable handles on an inode to a reconnecting session instead of only the file's own, letting authenticated attackers cause kernel memory corruption during durable reconnects, exploit requires multiple sessions with durable handles on the same file.
- 9.1 /10 CriticalCVE-2026-89634 No auth
Linux Kernel smb client - Out of Bounds Read & Denial of Service
Linux kernel contains a buffer overflow caused by an ALIGN() overflow in smb client symlink_data() error context loop, letting attackers cause out-of-bounds read or infinite loop, exploit requires crafted SMB response.
- 9.8 /10 CriticalCVE-2026-89633 No auth
Linux Kernel smb client - Out-of-Bounds Read/Write
Linux kernel smb client contains an out-of-bounds read/write caused by unvalidated DataOffset in coalesce_t2(), letting attackers cause memory corruption or crash, exploit requires crafted SMB packets.