Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 803 of 891

  • 7.8 /10 High
    CVE-2026-89563 Auth required

    Linux Kernel - Use After Free

    Linux kernel ip6_tunnel contains a memory management flaw in ip6_tnl_xmit() caused by improper skb headroom expansion using skb_realloc_headroom(), letting kernel components potentially free stale skb pointers, exploit requires kernel-level interaction.

  • 7.8 /10 High
    CVE-2026-89562 Auth required

    Linux Kernel ip6_gre - Misconfiguration

    Linux kernel ip6_gre contains a vulnerability caused by incorrect hardware header length calculation in NBMA tunnels, letting attackers potentially cause network issues, exploit requires specific tunnel configurations.

  • 7.5 /10 High
    CVE-2026-89561 No auth

    Linux Kernel - Denial of Service

    Linux kernel contains a NULL pointer dereference vulnerability in ipv6_rpl_srh_rcv() caused by missing NULL check on idev from __in6_dev_get(), letting attackers cause kernel crash via MTU flapping and ping6 traffic, exploit requires network access to affected interface.

  • 8.4 /10 High
    CVE-2026-89560 Auth required

    Linux Kernel - Broken Access Control

    Linux kernel contains a permission control vulnerability in Landlock where whiteout creation in OverlayFS was improperly guarded, allowing unprivileged users to create whiteout objects without proper LANDLOCK_ACCESS_FS_MAKE_REG permission, exploit requires userspace access to OverlayFS whiteout creation.

  • 7.8 /10 High
    CVE-2026-89559

    Linux Kernel libnvdimm - Integer Overflow

    Linux kernel libnvdimm contains an integer overflow caused by 32-bit multiplication wraparound in __nd_label_validate(), letting attackers trigger out-of-bounds write via crafted nslot value, exploit requires untrusted input from medium or userspace.

  • 9.8 /10 Critical
    CVE-2026-89558 No auth

    Linux Kernel md/raid10 - Data Corruption

    Linux kernel md/raid10 contains a logic error caused by incorrect boolean assignment in raid10_sync_request(), letting attackers cause silent data corruption during device recovery, exploit requires degraded RAID10 array with device failure.

  • 7.8 /10 High
    CVE-2026-89557

    Linux Kernel - Integer Overflow

    Linux kernel contains an integer overflow caused by lack of overflow check on sb->bblog_shift in super_1_load(), letting attackers trigger overflow in badblocks_set() via crafted superblock, exploit requires crafted on-disk superblock.

  • 9.8 /10 Critical
    CVE-2026-89555 No auth

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in mpls_select_multipath caused by stale header pointer after pskb_may_pull() reallocates skb head, letting attackers cause kernel memory corruption, exploit requires crafted Geneve packet with nonlinear skb data.

  • 8.2 /10 High
    CVE-2026-89554 No auth

    Linux Kernel - Memory Corruption

    Linux kernel contains a memory corruption vulnerability caused by uninitialized local_id in syncookie MP_JOIN reconstruction, letting off-path attackers corrupt subflow bookkeeping, exploit requires sending concurrent MP_JOIN SYNs.

  • 7.8 /10 High
    CVE-2026-89553 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability caused by a race condition between info ioctl vma lookup and gem close path in nouveau/gem, letting attackers cause memory corruption, exploit requires race condition timing.

  • 9.8 /10 Critical
    CVE-2026-89551 No auth

    Linux Kernel - Integer Overflow

    Linux kernel contains an integer underflow vulnerability in SUNRPC xdr_buf_trim function caused by improper clamping of buf->len during subtraction, letting attackers cause buffer length miscalculation, exploit requires crafted input triggering xdr_buf_trim.

  • 9.8 /10 Critical
    CVE-2026-89550 No auth

    Linux Kernel - Denial of Service

    Linux kernel contains a buffer length validation vulnerability in SUNRPC svcauth_gss component, caused by missing minimum length check on krb5 tokens, letting remote attackers cause a denial of service via crafted tokens, exploit requires network access.

  • 7.5 /10 High
    CVE-2026-89549 No auth

    Linux Kernel - Denial of Service

    Linux kernel contains a denial of service caused by svc_pool_for_cpu() routing to threadless pools in sunrpc, letting attackers cause connection hangs indefinitely, exploit requires specific nfsd thread configuration.

  • 7.8 /10 High
    CVE-2026-89548 Auth required

    Linux Kernel - Use After Free

    Linux kernel contains a use-after-free vulnerability in SUNRPC due to improper handling of cache_cleaner delayed_work during cache_detail destruction, letting attackers cause memory corruption, exploit requires kernel-level access.

  • 8.1 /10 High
    CVE-2026-89547 No auth

    Linux Kernel - Broken Authentication

    Linux kernel contains a broken authentication caused by unchecked percpu_counter allocation failure in SUNRPC svc pool initialization, letting local administrators cause memory corruption and kernel instability, exploit requires local admin privileges under memory pressure.