Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 94 of 677

  • 8.7 /10 High
    CVE-2026-77090 No auth

    CVFS - XML External Entity Injection

    CVFS contains an XML external entity injection caused by improper handling of XML external entity references, letting attackers disclose sensitive information, exploit requires crafted XML input.

  • 7.1 /10 High
    CVE-2026-76001 Auth required

    ColdFusion - Server-Side Request Forgery

    ColdFusion contains a server-side request forgery caused by improper validation of URLs, letting low-privileged attackers escalate privileges by accessing internal resources, exploit requires conditions beyond attacker control.

  • 7.5 /10 High
    CVE-2026-75996 No auth

    ColdFusion - Denial of Service

    ColdFusion contains an uncontrolled resource consumption vulnerability caused by improper resource management, letting attackers exhaust system resources and cause application denial-of-service, exploit requires no user interaction.

  • 8.4 /10 High
    CVE-2026-75995 Auth required

    ColdFusion - Improper Input Validation

    ColdFusion contains an improper input validation vulnerability that allows attackers with high privileges to execute arbitrary code in the context of the current user, exploit requires administrative network access.

  • 9.6 /10 Critical
    CVE-2026-75994 No auth

    ColdFusion - Broken Access Control

    ColdFusion contains an incorrect authorization vulnerability caused by improper access control in administrative network zone, letting attackers execute arbitrary code in the context of the current user, exploit requires network access to administrative zone.

  • 8.5 /10 High
    CVE-2026-75826 Auth required

    Teltonika Networks RUTOS & TSWOS - Command Injection

    Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2, and TSWOS 1.9 before 1.10.4 contain a command injection caused by improper input sanitization in the backup function, letting remote authenticated attackers execute arbitrary OS commands.

  • 7.6 /10 High
    CVE-2026-75748 Auth required

    ColdFusion - Server-Side Request Forgery

    ColdFusion contains a server-side request forgery caused by improper validation of URLs, letting attackers with high privileges escalate their access to internal resources, exploit requires high privileges.

  • 9.9 /10 Critical
    CVE-2026-75732 Auth required

    Adobe Experience Manager - Broken Access Control

    Adobe Experience Manager contains an incorrect authorization vulnerability that allows arbitrary code execution in the context of the current user, letting attackers gain elevated access or control, exploit requires no user interaction.

  • 9.3 /10 Critical
    CVE-2026-75120 No auth

    OpenText EnCase SAFE Agents - Authentication Bypass

    OpenText EnCase SAFE Agents contains an authentication bypass vulnerability caused by improper security controls during session establishment, letting unauthorized attackers establish connections to vulnerable Agents, exploit requires no authentication.

  • 7.1 /10 High
    CVE-2026-74045 Auth required

    Wazuh - Buffer Overflow

    Wazuh 3.12.0 before 4.14.8 contains a heap buffer overflow caused by improper sizing in fim_generate_alert(), letting enrolled agents crash wazuh-analysisd causing detection outages, exploit requires an enrolled agent.

  • 9.0 /10 Critical
    CVE-2026-74043 Auth required

    Wazuh - Path Traversal

    Wazuh > 4.1.1 < 4.14.8 contains a path traversal caused by improper validation in upload_list_file, upload_rule_file, and upload_decoder_file, letting malicious cluster workers write files at arbitrary paths, exploit requires cluster key access.

  • 9.1 /10 Critical
    CVE-2026-74041 Auth required

    Wazuh - Command Injection

    Wazuh 4.14.3 before 4.14.8 contains a command injection caused by case-sensitivity mismatch in ossec.conf validator and wazuh-logcollector, letting authenticated users with manager:update_config privileges execute commands as root, exploit requires manager:update_config privileges.

  • 9.1 /10 Critical
    CVE-2026-74040 Auth required

    Wazuh - Remote Code Execution

    Wazuh >= 3.9.0 < 4.14.8 contains an arbitrary file overwrite vulnerability caused by trailing-slash basename bypass and missing extra_valid enforcement in MasterHandler.process_files_from_worker, letting cluster workers achieve root remote code execution, exploit requires attacker control of a cluster worker.

  • 7.2 /10 High
    CVE-2026-74037 Auth required

    Wazuh - Authentication Bypass

    Wazuh 4.0.0 < 4.14.8 contains a broken authentication caused by failure to invalidate tokens for run_as users with zero static roles, letting attackers with revoked admin grants retain privileged access, exploit requires revoked admin privileges.

  • 7.2 /10 High
    CVE-2026-74036

    Wazuh - Remote Code Execution

    Wazuh 4.3.0 < 4.14.8 contains a remote code execution caused by SCA policy trust determined by file path instead of configuration source, letting attackers controlling a manager execute commands as root on agents, exploit requires manager control.