Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 13360
- Critical
- 2486
- CISA KEV
- 125
- Public PoC
- 437
Most common types
- Broken Access Control 1691
- Remote Code Execution 1609
- Privilege Escalation 1307
- Authentication Bypass 1121
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 806 of 891
- 7.8 /10 HighCVE-2026-89499 Auth required
Linux Kernel - Race Condition
Linux kernel contains a race condition in ring-buffer remote reader update caused by improper handling of swap_reader_page callback failure, letting remote readers cause inconsistent page state, exploit requires event storm on small buffer.
- 7.8 /10 HighCVE-2026-89497 Auth required
Linux Kernel - Out of Bounds Read/Write
Linux kernel contains a buffer overflow caused by inconsistent handling of leading spaces in client debug mask parsing in orangefs_prepare_cdm_array(), letting attackers write past allocated buffer, exploit requires crafted client debug entry.
- 9.8 /10 CriticalCVE-2026-89495 No auth
Linux Kernel ocfs2 - Out-of-Bounds Write & Read
Linux kernel ocfs2 contains a heap out-of-bounds write caused by unbounded peer-controlled length fields in dlm_migrate_request_handler and related handlers, letting any node in a DLM domain corrupt or panic other nodes, exploit requires attacker to be a member of the cluster.
- 9.8 /10 CriticalCVE-2026-89494 No auth
Linux Kernel ocfs2 - Out-of-Bounds Read & Write
Linux kernel ocfs2 contains an out-of-bounds read and heap out-of-bounds write caused by unvalidated num_locks and lockname_len fields in dlm_mig_lockres_handler, letting any node in the domain cause a kernel panic or memory corruption, exploit requires network access within the domain.
- 8.8 /10 HighCVE-2026-89493 Auth required
Linux Kernel ocfs2 - Out of Bounds Read & Write
Linux kernel ocfs2 contains an out-of-bounds read and write caused by missing validation of rl_used and rl_count fields in refcount block, letting local attackers with CAP_SYS_ADMIN mount crafted or corrupted images to cause memory corruption, exploit requires CAP_SYS_ADMIN privileges.
- 9.8 /10 CriticalCVE-2026-89492 No auth
Linux Kernel ocfs2 - Out-of-Bounds Read
Linux kernel ocfs2 filesystem contains an out-of-bounds read vulnerability caused by missing bounds checks on directory-index entry counts in metadata blocks, letting attackers with crafted on-disk images cause slab out-of-bounds reads during directory operations, exploit requires mounting a crafted filesystem image.
- 7.8 /10 HighCVE-2026-89489 Auth required
Linux Kernel - Broken Access Control
Linux kernel openrisc ABI < 244 contains an arbitrary kernel memory access vulnerability caused by unchecked user pointers in sys_or1k_atomic syscall, letting unprivileged attackers read/write kernel memory and execute code, exploit requires unprivileged process.
- 7.8 /10 HighCVE-2026-89488 Auth required
Linux Kernel openvswitch - Use After Free
Linux kernel openvswitch contains a use-after-free vulnerability caused by improper handling of CT limit state under RCU and ovs_mutex during netns teardown, letting unprivileged users trigger slab-use-after-free in ovs_ct_execute(), exploit requires user and network namespace access.
- 7.8 /10 HighCVE-2026-89487 Auth required
Linux Kernel openvswitch - Broken Access Control
Linux kernel openvswitch contains a broken access control vulnerability caused by improper handling of skb_tx_error() on packets still in use, letting unprivileged attackers perform unauthorized page-cache writes, exploit requires triggering specific packet flows with MSG_ZEROCOPY skb.
- 7.8 /10 HighCVE-2026-89486
Linux Kernel ipmi - Use After Free
Linux kernel ipmi contains a use-after-free vulnerability caused by missing synchronize_rcu() before freeing cmd_rcvr in _ipmi_destroy_user(), letting attackers cause memory corruption, exploit requires kernel-level access.
- 9.8 /10 CriticalCVE-2026-89485 No auth
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in lockd due to improper pinning of the next file pointer during nlm_inspect_file lock-drop, letting attackers cause memory corruption, exploit requires concurrent file operations.
- 7.5 /10 HighCVE-2026-89483
Linux kernel nvme - Information Disclosure
Linux kernel nvme contains an uninitialized memory disclosure caused by fallback discard page not being zeroed in nvme_setup_discard, letting attackers with memory pressure conditions leak kernel memory, exploit requires memory pressure causing allocation failure.
- 9.8 /10 CriticalCVE-2026-89482 No auth
Linux Kernel nvme-tcp - Memory Corruption
Linux kernel nvme-tcp contains a memory corruption vulnerability caused by improper validation of C2HData based on blk_rq_payload_bytes() without checking blk_rq_nr_phys_segments(), letting attackers cause wild memory access and kernel crash, exploit requires crafted network packets targeting WRITE_ZEROES commands.
- 7.5 /10 HighCVE-2026-89481
Linux Kernel nvme-tcp - Information Disclosure
Linux kernel nvme-tcp contains an information disclosure vulnerability caused by improper direction check in nvme_tcp_handle_r2t for read commands, letting malicious controllers read host memory, exploit requires malicious controller sending crafted R2T packets.
- 7.5 /10 HighCVE-2026-89480 No auth
Linux Kernel nvme-tcp - Data Integrity Vulnerability
Linux kernel nvme-tcp contains a data integrity vulnerability caused by improper validation of read byte count in nvme_tcp_recv_data(), letting attackers cause incomplete reads to be reported as complete, exploit requires malicious NVMe controller.