Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 13360
- Critical
- 2486
- CISA KEV
- 125
- Public PoC
- 437
Most common types
- Broken Access Control 1691
- Remote Code Execution 1609
- Privilege Escalation 1307
- Authentication Bypass 1121
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 812 of 891
- 7.8 /10 HighCVE-2026-81000 PoC publicAuth required
Linux Kernel net tun - Buffer Overflow
Linux kernel net tun driver contains a buffer overflow caused by improper handling of skb headroom and alignment in tun_get_user(), letting attackers cause memory corruption, exploit requires crafted oversized headroom request.
- 7.5 /10 HighCVE-2026-80998 No auth
Linux kernel net: bnxt - Denial of Service
Linux kernel net: bnxt contains a denial of service caused by missing doorbell ringing on early exit in SW USO path, letting attackers cause TX queue stalls, exploit requires sending burst packets triggering early return.
- 7.5 /10 HighCVE-2026-80997 No auth
Linux Kernel - Denial of Service
Linux kernel contains a denial of service caused by improper handling of the modem TX queue during runtime resume in net: ipa component, letting attackers cause permanent transmit stalls, exploit requires device runtime suspend/resume cycles.
- 7.8 /10 HighCVE-2026-80995 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in the MCTP network component caused by improper reference handling of route device in mctp_route_lookup(), letting unprivileged local AF_MCTP users cause memory corruption, exploit requires local access.
- 7.8 /10 HighCVE-2026-80994 Auth required
Linux Kernel openvswitch - Use After Free
Linux kernel openvswitch contains a use-after-free vulnerability caused by improper RCU locking order during flow deletion in flow mask handling, letting attackers cause kernel crashes, exploit requires network access to trigger flow deletion.
- 7.8 /10 HighCVE-2026-80992 Auth required
Linux Kernel net: ravb - Denial of Service
Linux kernel net: ravb contains a null pointer dereference caused by querying PTP clock index before first open or registration failures, letting attackers cause denial of service, exploit requires triggering clock query before initialization.
- 7.8 /10 HighCVE-2026-80991 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability caused by a race condition between ravb_ptp_interrupt() and ravb_ptp_stop() in PTP clock teardown, letting attackers cause memory corruption, exploit requires triggering PTP clock events.
- 8.8 /10 HighCVE-2026-80989 No auth
Linux kernel net thunderbolt - Denial of Service
Linux kernel net thunderbolt contains a logic flaw in tbnet_connected_work() where connection state is not properly cleared on failure, causing repeated teardown and resource mismanagement, letting attackers cause system warnings or crashes, exploit requires network interaction.
- 7.5 /10 HighCVE-2026-80987 No auth
Linux Kernel - Denial of Service
Linux kernel contains a denial of service caused by improper handling of oversized TX buffers in ntb_transport, letting attackers cause resource leaks, exploit requires sending oversized buffers.
- 9.8 /10 CriticalCVE-2026-80986 No auth
Linux Kernel - Out of Bounds Read/Write
Linux kernel contains a buffer over-read vulnerability in net/smc SMC-Rv2 LLC message handling caused by unbounded peer rkey counts, letting attackers cause kernel memory corruption or crash, exploit requires network access to SMC-Rv2 link.
- 8.2 /10 HighCVE-2026-80985
Linux Kernel - Data Tampering & Denial of Service
Linux kernel contains a vulnerability in net/smc where oversized SMC-Rv2 LLC messages are improperly handled in smc_llc_rmt_delete_rkey() and smc_llc_save_add_link_rkeys(), letting attackers cause unintended rkey deletions and modifications, exploit requires crafted SMC-Rv2 LLC messages on a shared v2 receive buffer link.
- 7.8 /10 HighCVE-2026-80982 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in net/smc due to improper locking in smc_rx_pipe_buf_release(), letting attackers cause memory corruption or denial of service, exploit requires concurrent socket close and receive operations.
- 9.8 /10 CriticalCVE-2026-80981
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in net/smc component caused by use of freed LLC queue entry in smc_llc_srv_add_link(), letting attackers cause memory corruption or system instability, exploit requires kernel-level conditions.
- 9.8 /10 CriticalCVE-2026-80980 No auth
Linux Kernel - Race Condition
Linux kernel contains a race condition in net/smc due to shared single-byte bitfields for connection state flags, letting concurrent contexts cause inconsistent state, exploit requires concurrent access to connection flags.
- 7.8 /10 HighCVE-2026-80979 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in net/smc due to improper connection unregistering and tasklet draining, letting attackers cause kernel memory corruption, exploit requires triggering specific network operations.