Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 832 of 891

  • 7.5 /10 High
    CVE-2026-49362 No auth

    Apache Artemis - Broken Access Control

    Apache Artemis 2.50.0 through 2.56.0 and Apache ActiveMQ Artemis 1.0.0 through 2.44.0 contain an unauthorized broker state manipulation vulnerability caused by unauthenticated remote creation of arbitrary durable queues via the CORE protocol, letting unauthenticated attackers cause denial of service.

  • 7.5 /10 High
    CVE-2026-46387 No auth

    Suricata - Denial of Service

    Suricata < 7.0.16 and < 8.0.5 contain a denial of service caused by unbounded HTTP/2 decompression buffer growth, letting remote attackers exhaust memory via crafted compressed HTTP/2 DATA payloads, exploit requires network access.

  • 7.5 /10 High
    CVE-2026-45770 No auth

    Suricata - Sandbox Bypass & Denial of Service

    Suricata >= 8.0.0 and < 8.0.5 contains a sandbox bypass and denial of service caused by excessive flow variable registration in Lua rules, letting attackers bypass Lua sandbox or crash Suricata, exploit requires loading a crafted Lua script/rule.

  • 7.5 /10 High
    CVE-2026-45769 No auth

    Suricata - Denial of Service

    Suricata < 7.0.16 and < 8.0.5 contain a denial of service caused by unbounded growth of IKEv2 parser state when storing client transforms, letting attackers cause excessive memory consumption via crafted UDP traffic, exploit requires repeated crafted UDP packets.

  • 7.5 /10 High
    CVE-2026-45768 No auth

    Suricata - Denial of Service

    Suricata 8.0.0 to < 8.0.5 contains a denial of service caused by unbounded LDAP transaction state storing excessive responses, letting attackers cause memory exhaustion via crafted UDP LDAP traffic, exploit requires crafted network traffic.

  • 7.5 /10 High
    CVE-2026-45766 No auth

    Suricata - Denial of Service

    Suricata < 7.0.16 and < 8.0.5 contain a denial of service caused by insufficiently bounded NFS parser state structures, letting remote attackers cause excessive memory consumption, exploit requires crafted NFS traffic.

  • 7.5 /10 High
    CVE-2026-45765 No auth

    Suricata - Denial of Service

    Suricata < 7.0.16 and < 8.0.5 contain a denial of service caused by insufficient parser-level bounds in DNP3 reassembly, letting attackers cause excessive memory consumption remotely, exploit requires crafted DNP3 traffic.

  • 9.1 /10 Critical
    CVE-2026-45764 No auth

    Suricata - Denial of Service

    Suricata < 7.0.16 and < 8.0.5 contain a denial of service caused by type confusion during HTTP/2 protocol processing, letting attackers crash the system remotely, exploit requires crafted HTTP/2 traffic.

  • 7.5 /10 High
    CVE-2026-45762 No auth

    Suricata - Denial of Service

    Suricata < 7.0.16 and < 8.0.5 contain a denial of service caused by improper IP defragmentation tracker lookup allowing IPv6 fragments to be associated with IPv4 trackers, letting remote attackers crash the system via crafted fragmented packets, exploit requires crafted fragmented IPv4/IPv6 traffic.

  • 7.5 /10 High
    CVE-2026-45759 No auth

    Suricata - Denial of Service

    Suricata < 7.0.16 and < 8.0.5 contains a denial of service caused by expensive parsing of large HTTP Content-Disposition headers during HTTP response processing, letting attackers cause excessive CPU usage remotely, exploit requires crafted HTTP traffic.

  • 7.5 /10 High
    CVE-2026-45747 PoC publicNo auth

    Suricata - Denial of Service

    Suricata < 7.0.16 contains a denial of service caused by dereferencing NULL certificate fields in Lua TLS certificate information helper, letting attackers crash the system by sending crafted TLS traffic, exploit requires Lua scripting on untrusted traffic.

  • 9.0 /10 Critical
    CVE-2026-44950

    libXfont2 - Buffer Overflow

    libXfont2 contains a heap buffer overflow caused by improper validation of cumulative glyph bitmap copy sizes in fs_read_glyphs(), letting a malicious font server overflow the destination buffer, exploit requires a malicious font server.

  • 8.0 /10 High
    CVE-2026-42807 No auth

    BoschSensortec COINES_SDK - Buffer Overflow

    BoschSensortec COINES_SDK 2.10 through 2.12.2 contains a heap-based buffer overflow caused by unvalidated packet length in the PC bridge protocol decoder, letting attackers cause denial of service or execute arbitrary code via malicious USB or BLE payloads.

  • 8.4 /10 High
    CVE-2026-42805 No auth

    Bosch Sensortec BHI385 SensorAPI - Buffer Overflow

    Bosch Sensortec BHI385 SensorAPI contains a stack-based buffer overflow caused by lack of bounds checking on message length in debug message parser, letting attackers cause DoS or execute arbitrary code via crafted sensor payload.

  • 7.6 /10 High
    CVE-2026-42804

    Bosch Sensortec BHI360 SensorAPI - Buffer Overflow

    Bosch Sensortec BHI360 SensorAPI (C-Library) up to commit d6b200416a contains a stack-based buffer overflow caused by unchecked memcpy of debug frame payload in bhi360_parse_debug_message(), letting locally or physically positioned attackers execute arbitrary code or cause denial of service via crafted debug frames.