Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 13360
- Critical
- 2486
- CISA KEV
- 125
- Public PoC
- 437
Most common types
- Broken Access Control 1691
- Remote Code Execution 1609
- Privilege Escalation 1307
- Authentication Bypass 1121
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 811 of 891
- 7.2 /10 HighCVE-2026-81825 No auth
Simple Ajax Chat - Stored Cross-Site Scripting
Simple Ajax Chat WordPress plugin <= 20260811 contains a stored XSS caused by insufficient input sanitization and output escaping in chat messages, letting unauthenticated attackers inject persistent scripts executed by all users, exploit requires no authentication.
- 7.2 /10 HighCVE-2026-81754 No auth
The Vigilant WordPress - Stored XSS
The Vigilant WordPress plugin <= 2.10.2 contains a stored cross-site scripting caused by insufficient sanitization and escaping of the User-Agent header, letting unauthenticated attackers inject scripts executed on user page access, exploit requires triggering a failed login with crafted User-Agent.
- 8.4 /10 HighCVE-2026-81017
Linux kernel - Out of Bounds Read & Write
Linux kernel platform/chrome sensorhub contains a buffer over-read and write caused by lack of validation of EC-reported sensor number in sensorhub batch_state indexing, letting attackers cause out-of-bounds memory access, exploit requires crafted EC FIFO events.
- 7.7 /10 HighCVE-2026-81016
Linux kernel - Broken Authentication
Linux kernel contains a broken authentication vulnerability caused by improper handling and validation of SMU command return values in platform/x86/amd/pmc, letting attackers cause system instability or denial of service, exploit requires access to trigger SMU commands.
- 7.8 /10 HighCVE-2026-81015
Linux Kernel - Denial of Service
Linux kernel contains a resource leak vulnerability caused by improper cleanup in amd_pmc_probe() when amd_stb_s2d_init() fails, letting attackers cause kernel crashes or unstable system state, exploit requires module reload or s2idle transition.
- 8.4 /10 HighCVE-2026-81012 No auth
Linux kernel - Buffer Overflow
Linux kernel contains an off-by-one write vulnerability in hp_get_string_from_buffer() due to improper boundary check on string length, letting local attackers cause memory corruption, exploit requires local access.
- 7.1 /10 HighCVE-2026-81011 Auth required
Linux kernel - Out-of-Bounds Read
Linux kernel platform/x86 hp-bioscfg contains an out-of-bounds read caused by forwarding incorrect element count to package parsers, letting attackers potentially cause heap read beyond array bounds, exploit requires crafted ACPI package data.
- 7.8 /10 HighCVE-2026-81010 Auth required
Linux Kernel io_uring - Denial of Service
Linux kernel io_uring contains a task_work cancellation handling flaw in io_waitid_cb(), causing incorrect child process wait behavior when fallback task_work runs from kworker, letting attackers cause denial of service by request cancellation.
- 7.8 /10 HighCVE-2026-81008
Linux Kernel - Use After Free
Linux kernel contains a use after free vulnerability in interconnect component caused by improper freeing of path object in icc_get() and of_icc_get_by_index(), letting local attackers cause memory corruption, exploit requires kernel debugfs access.
- 7.1 /10 HighCVE-2026-81007 Auth required
Linux Kernel - Buffer Validation Vulnerability
Linux kernel contains a buffer validation vulnerability in ipmb_write() caused by reading message fields before validating length, letting attackers cause memory corruption or information disclosure, exploit requires crafted IPMB messages.
- 7.8 /10 HighCVE-2026-81006
Linux kernel ipmi - Use After Free
Linux kernel ipmi contains a use-after-free vulnerability caused by incomplete sysfs file removal on ipmi_add_smi registration failure, letting attackers cause system instability or denial of service, exploit requires triggering registration failure.
- 8.4 /10 HighCVE-2026-81004
Linux Kernel - Race Condition
Linux kernel contains a race condition in IPMI message handler caused by improper cancellation of scheduled work on error during IPMI interface startup, letting attackers cause resource mismanagement, exploit requires triggering IPMI interface startup error.
- 8.1 /10 HighCVE-2026-81003 No auth
Linux Kernel - Broken Access Control
Linux kernel contains an AF_IUCV socket binding vulnerability caused by lack of ingress device verification in afiucv_hs_rcv(), letting attackers inject data, exhaust accept queues, or spoof peers across network namespaces, exploit requires sending crafted frames on the same HiperSockets segment.
- 9.8 /10 CriticalCVE-2026-81002
Linux Kernel - Memory Corruption
Linux kernel contains a memory corruption vulnerability in xdp_convert_zc_to_xdp_frame caused by improper zero-copy frame layout handling in AF_XDP packets redirected through cpumap, letting attackers cause kernel panic or memory corruption, exploit requires use of AF_XDP zero-copy with cpumap redirection.
- 7.8 /10 HighCVE-2026-81001 Auth required
Linux Kernel slip - Use After Free
Linux kernel slip driver contains a use-after-free vulnerability caused by race conditions in slip_devs[] handling during device teardown and synchronization, letting local attackers cause memory corruption, exploit requires concurrent slip device open/close operations.