Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 13360
- Critical
- 2486
- CISA KEV
- 125
- Public PoC
- 437
Most common types
- Broken Access Control 1691
- Remote Code Execution 1609
- Privilege Escalation 1307
- Authentication Bypass 1121
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 814 of 891
- 7.8 /10 HighCVE-2026-80947 Auth required
Linux kernel rtl8xxxu - Use After Free
Linux kernel rtl8xxxu driver contains a use-after-free vulnerability caused by improper cancellation of rx_urb_wq worker during device stop, letting attackers cause memory corruption or system instability, exploit requires active RX traffic followed by device disconnect.
- 9.1 /10 CriticalCVE-2026-80945
Linux kernel crypto: iaa - Data Tampering
Linux kernel crypto: iaa contains a data tampering vulnerability caused by improper unmapping of destination buffer before software fallback on decompress, letting attackers cause data corruption, exploit requires hardware analytics error triggering fallback.
- 7.8 /10 HighCVE-2026-80944 Auth required
Linux Kernel mwifiex - Denial of Service
Linux kernel mwifiex driver contains a stack corruption vulnerability caused by late firmware responses writing through stale stack-backed data buffers after interrupted wait_event_interruptible_timeout calls, letting attackers cause kernel panic and memory corruption, exploit requires repeated association/disassociation cycles.
- 7.6 /10 HighCVE-2026-80943 No auth
Linux Kernel rtlwifi - Out-of-Bounds Read/Write
Linux kernel wifi rtlwifi rtl8192du contains an out-of-bounds array indexing vulnerability caused by unchecked QoS TID indexing in rtl92du_tx_fill_desc(), letting attackers potentially cause memory corruption or denial of service, exploit requires crafted network packets.
- 8.8 /10 HighCVE-2026-80937
Linux Kernel - Out-of-Bounds Write
Linux kernel contains a buffer overflow caused by unchecked device-controlled EEPROM address in mt7915_mcu_get_eeprom(), letting malicious devices perform out-of-bounds writes, exploit requires malicious or malfunctioning device.
- 7.8 /10 HighCVE-2026-80936
Linux kernel mt76 mt7925 - Use After Free
Linux kernel mt76 mt7925 contains a use-after-free caused by not cancelling delayed mlo_pm_work during device stop, letting attackers cause kernel warnings or crashes, exploit requires device teardown during power-save setup.
- 8.8 /10 HighCVE-2026-80935
Linux Kernel mt76 - Out-of-Bounds Write
Linux kernel mt76 mt7996 contains an out-of-bounds write vulnerability caused by unbounded device EEPROM address in mt7996_mcu_get_eeprom(), letting malicious devices write beyond eeprom.data, exploit requires malicious or malfunctioning device.
- 7.8 /10 HighCVE-2026-80933
Linux kernel mt76 - Out of Bounds Read
Linux kernel mt76 mt7996 driver contains a buffer overflow caused by lack of length validation of default EEPROM firmware, letting attackers cause out-of-bounds read, exploit requires supplying truncated firmware file.
- 8.4 /10 HighCVE-2026-80932 No auth
Linux Kernel virtio_vsock - Use After Free
Linux kernel virtio_vsock contains a use-after-free vulnerability caused by improper flushing order of dependent work items in virtio_vsock_remove(), letting attackers cause memory corruption or system instability, exploit requires kernel-level access.
- 7.8 /10 HighCVE-2026-80931
Linux Kernel w1: ds28e17 - Out of Bounds Read
Linux kernel w1: ds28e17 contains a buffer overflow caused by improper length validation in I2C block read, letting a malicious device cause out-of-bounds read, exploit requires a malicious I2C slave device.
- 7.8 /10 HighCVE-2026-80929 Auth required
Linux Kernel - Broken Access Control
Linux kernel contains a broken access control vulnerability caused by improper placement of the "cad_pid" sysctl entry in pid_table[], allowing non-root users to modify it via unshared pid/user namespaces, exploit requires namespace unsharing.
- 7.8 /10 HighCVE-2026-80928 Auth required
Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in smack_file_send_sigiotask() caused by improper access to task credentials, letting attackers cause memory corruption, exploit requires triggering specific task credential inspection.
- 9.8 /10 CriticalCVE-2026-80926 No auth
Linux Kernel ksmbd - Use After Free
Linux kernel ksmbd contains a use-after-free vulnerability caused by unsynchronized access to opinfo->conn in oplock break notification, letting authenticated clients with durable batch oplocks cause memory corruption, exploit requires authenticated client with durable batch oplock.
- 8.3 /10 HighCVE-2026-80469 No auth
Device Driver Package - Remote Code Execution
A device driver package upload mechanism contains a code execution vulnerability caused by bypassing driver verification, letting attackers execute arbitrary code, exploit requires user interaction.
- 10.0 /10 CriticalCVE-2026-80462 No auth
Chef Automate - Broken Access Control
Chef Automate contains a broken access control vulnerability in the API gateway and identity validation path, letting unauthenticated actors gain elevated access to protected functionality under specific conditions.