Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
13360
Critical
2486
CISA KEV
125
Public PoC
437

Most common types

  • Broken Access Control 1691
  • Remote Code Execution 1609
  • Privilege Escalation 1307
  • Authentication Bypass 1121
  • Denial of Service 799

Published per day, last 14 days

21 Oct Critical Other 3 Nov

Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 851 of 891

  • 7.8 /10 High
    CVE-2026-85983 Auth required

    Auth0 AD/LDAP Connector - Privilege Escalation

    Auth0 AD/LDAP Connector contains a privilege escalation vulnerability caused by improper processing of configuration values during service startup, letting low-privileged local users modify configuration leading to code execution, exploit requires local access.

  • 9.0 /10 Critical
    CVE-2026-85982 Auth required

    Auth0 AD/LDAP Connector - Stored XSS

    Auth0 AD/LDAP Connector contains a stored XSS caused by improper HTML encoding in search results and updater log content, letting authenticated users with directory modification privileges or local users execute scripts in admin browsers.

  • 7.8 /10 High
    CVE-2026-85880 CISA KEVAuth required

    Windows ALPC - Privilege Escalation

    Windows ALPC contains a heap-based buffer overflow caused by improper memory handling, letting authorized local attackers elevate privileges, exploit requires local access with authorization.

  • 8.8 /10 High
    CVE-2026-85877 No auth

    Windows Print Spooler Components - Remote Code Execution

    Windows Print Spooler Components contain a heap-based buffer overflow, letting unauthorized attackers execute code remotely over a network, exploit requires network access.

  • 7.0 /10 High
    CVE-2026-85360 Auth required

    Windows Kernel - Privilege Escalation

    Windows Kernel contains a use after free vulnerability allowing authorized local attackers to elevate privileges by exploiting memory corruption.

  • 8.7 /10 High
    CVE-2026-84942 Auth required

    OpenSearch Dashboards - Stored XSS

    OpenSearch Dashboards contains a stored XSS caused by improper input validation in the Vega expression function, letting remote authenticated users with dashboard write permissions execute arbitrary JavaScript in other users' browsers, exploit requires dashboard write permissions.

  • 9.9 /10 Critical
    CVE-2026-84869 CISA KEVAuth required

    ScreenConnect - Remote Code Execution

    ScreenConnect client contains an unauthorized file transfer and execution vulnerability during active remote sessions, letting attackers transfer and execute files without host confirmation, exploit requires active remote session.

  • 7.4 /10 High
    CVE-2026-84003 No auth

    Microsoft Authentication Library (MSAL) for Node.js - Authentication Bypass

    Microsoft Authentication Library (MSAL) for Node.js contains an authentication bypass caused by capture-replay attacks, letting unauthorized attackers perform spoofing over a network, exploit requires network access.

  • 7.5 /10 High
    CVE-2026-84001 No auth

    Windows Key Distribution Center - Denial of Service

    Windows Key Distribution Center contains an out-of-bounds read vulnerability allowing unauthorized attackers to cause denial of service over a network, exploit requires network access.

  • 7.8 /10 High
    CVE-2026-84000 Auth required

    Microsoft Graphics Component - Buffer Overflow

    Microsoft Graphics Component contains a heap-based buffer overflow caused by improper memory handling, letting authorized attackers execute code locally, exploit requires local access with authorization.

  • 7.0 /10 High
    CVE-2026-83999 Auth required

    Windows Resilient File System Deduplication Service - Privilege Escalation

    Windows Resilient File System (ReFS) Deduplication Service contains a privilege escalation caused by improper link resolution before file access, letting authorized attackers elevate privileges locally, exploit requires local access with authorization.

  • 8.8 /10 High
    CVE-2026-83998 No auth

    Remote Desktop Client - Remote Code Execution

    Remote Desktop Client contains a heap-based buffer overflow caused by improper memory handling, letting unauthorized attackers execute code remotely, exploit requires network access.

  • 8.1 /10 High
    CVE-2026-83997 No auth

    Windows Message Queuing - Remote Code Execution

    Windows Message Queuing contains a use after free vulnerability allowing unauthorized attackers to execute code remotely over a network, exploit requires network access.

  • 8.8 /10 High
    CVE-2026-83996 Auth required

    Windows Error Reporting - Privilege Escalation

    Windows Error Reporting contains a heap-based buffer overflow caused by improper memory handling, letting authorized local attackers elevate privileges, exploit requires local access with authorization.

  • 7.8 /10 High
    CVE-2026-83995 Auth required

    Windows NTFS - Privilege Escalation

    Windows NTFS contains a heap-based buffer overflow caused by improper memory handling, letting authorized attackers elevate privileges locally, exploit requires local access with authorization.