Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 95 of 677

  • 7.2 /10 High
    CVE-2026-74035 Auth required

    Wazuh - Authentication Bypass

    Wazuh >= 4.6.0 < 4.14.8 contains an authentication bypass caused by a falsy truthiness check in security.update_user, letting delegated user administrators bypass reserved user guard and authenticate with empty credentials.

  • 7.5 /10 High
    CVE-2026-74034 PoC publicNo auth

    Wazuh - Broken Access Control

    Wazuh 4.1.0 before 4.14.8 contains a missing origin check in wm_agent_upgrade, letting enrolled agents read arbitrary files as root via upgrade_custom commands with attacker-controlled file_path, exploit requires enrolled agent access.

  • 7.8 /10 High
    CVE-2026-73027 Auth required

    Windows Setup Files Cleanup - Privilege Escalation

    Windows Setup Files Cleanup contains a privilege escalation caused by external control of system or configuration settings, letting authorized attackers elevate privileges locally, exploit requires local access with authorization.

  • 7.0 /10 High
    CVE-2026-72969 Auth required

    Windows Program Compatibility Assistant Service - Privilege Escalation

    Windows Program Compatibility Assistant Service contains a use after free vulnerability, letting authorized local attackers elevate privileges, exploit requires local access with authorization.

  • 7.0 /10 High
    CVE-2026-72968 Auth required

    Windows Program Compatibility Assistant Service - Privilege Escalation

    Windows Program Compatibility Assistant Service contains a use after free vulnerability, letting authorized local attackers elevate privileges, exploit requires local access with authorization.

  • 7.0 /10 High
    CVE-2026-72955 Auth required

    Windows Application Compatibility Cache - Privilege Escalation

    Windows Application Compatibility Cache contains a use after free vulnerability allowing authorized local attackers to elevate privileges by exploiting memory corruption.

  • 7.0 /10 High
    CVE-2026-72934 Auth required

    Windows Program Compatibility Assistant Service - Privilege Escalation

    Windows Program Compatibility Assistant Service contains a use after free vulnerability, letting authorized local attackers elevate privileges, exploit requires local access with authorization.

  • 7.7 /10 High
    CVE-2026-72895 No auth

    SIMATIC IPC - Authentication Bypass

    SIMATIC IPC BX-21A < V31.01.13, IPC RW-543A < V1.1.4, IPC227G/IPC277G/IPC277G PRO/IPC327G/IPC377G < V28.01.15 contain a UEFI Secure Boot bypass caused by presence of BIOS vendor test key in the Secure Boot key database, letting local attackers with physical or administrative access bypass Secure Boot protections, exploit requires local physical or administrative access.

  • 8.4 /10 High
    CVE-2026-71385 Auth required

    ColdFusion - Broken Access Control

    ColdFusion contains an incorrect authorization vulnerability caused by improper access control, letting attackers with high privileges execute arbitrary code in the context of the current user, exploit requires administrative network zone access.

  • 8.8 /10 High
    CVE-2026-70580 Auth required

    Windows Credential Guard - Authentication Bypass

    Windows Credential Guard contains a missing authentication for critical function vulnerability, letting authorized local attackers perform spoofing, exploit requires local access.

  • 8.1 /10 High
    CVE-2026-70571 No auth

    Microsoft Exchange Server - Remote Code Execution

    Microsoft Exchange Server contains a stack-based buffer overflow caused by improper memory handling, letting unauthorized attackers execute code remotely, exploit requires network access.

  • 7.8 /10 High
    CVE-2026-70566 Auth required

    Windows Schannel - Privilege Escalation

    Windows Schannel contains a null pointer dereference caused by improper handling in the Schannel component, letting authorized local attackers elevate privileges, exploit requires local access with authorization.

  • 8.8 /10 High
    CVE-2026-70343 No auth

    Microsoft MPEG-2 Video Extension - Remote Code Execution

    Microsoft MPEG-2 Video Extension contains a heap-based buffer overflow caused by improper memory handling, letting unauthorized attackers execute code remotely, exploit requires network access.

  • 7.8 /10 High
    CVE-2026-70303 Auth required

    Windows Kernel - Privilege Escalation

    Windows Kernel contains an out-of-bounds write caused by improper memory handling, letting authorized attackers elevate privileges locally, exploit requires local access with authorization.

  • 8.8 /10 High
    CVE-2026-70302 No auth

    Microsoft Office Word - Remote Code Execution

    Microsoft Office Word contains a heap-based buffer overflow caused by improper memory handling, letting unauthorized attackers execute code remotely, exploit requires network access.