Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 506 of 681

  • 7.1 /10 High
    CVE-2026-87262

    Oracle Agile Engineering Data Management - Broken Access Control

    Oracle Agile Engineering Data Management 6.2.1 contains an unauthorized access vulnerability caused by physical communication segment access in Engineering Communication Interface, letting unauthenticated attackers access and modify critical data, exploit requires physical access to communication segment.

  • 7.3 /10 High
    CVE-2026-87261 Auth required

    Oracle Agile Engineering Data Management - Broken Access Control

    Oracle Agile Engineering Data Management 6.2.1 contains a broken access control vulnerability in Engineering Communication Interface, letting low privileged logged-in attackers gain unauthorized access and modify data, exploit requires user login.

  • 7.3 /10 High
    CVE-2026-87260

    Oracle Agile Engineering Data Management - Broken Access Control

    Oracle Agile Engineering Data Management 6.2.1 contains a broken access control vulnerability caused by insufficient protection of the physical communication segment, letting low privileged attackers with physical access create, delete, or modify critical data.

  • 8.4 /10 High
    CVE-2026-87259 Auth required

    Oracle Agile Engineering Data Management - Broken Access Control

    Oracle Agile Engineering Data Management 6.2.1 contains a broken access control vulnerability caused by insufficient privilege checks in Engineering Communication Interface, letting low privileged logged-in attackers create, delete, or modify critical data, exploit requires attacker login.

  • 7.6 /10 High
    CVE-2026-87258 Auth required

    Oracle Agile PLM - Broken Access Control

    Oracle Agile PLM 9.3.6 contains an access control vulnerability in Folders, Files & Attachments, letting low privileged attackers with network access via HTTP and user interaction gain unauthorized access and modify data.

  • 7.7 /10 High
    CVE-2026-87257 Auth required

    Oracle Agile PLM - Broken Access Control

    Oracle Agile PLM 9.3.6 contains an unauthorized access vulnerability in the SDK component, letting low privileged attackers with network access via HTTP compromise critical data, exploit requires low privileges.

  • 7.7 /10 High
    CVE-2026-87256 Auth required

    Oracle Agile PLM - Broken Access Control

    Oracle Agile PLM 9.3.6 contains an unauthorized access vulnerability caused by insufficient access controls in the Application Server, letting low privileged attackers with network access via HTTP access critical data, exploit requires low privileges.

  • 7.5 /10 High
    CVE-2026-87254 Auth required

    Oracle Agile PLM - Authentication Bypass

    Oracle Agile PLM 9.3.6 contains a vulnerability in Folders, Files & Attachments component, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileges and network access.

  • 7.6 /10 High
    CVE-2026-87250 Auth required

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains an unauthorized access vulnerability caused by insufficient access control in the Security component, letting low privileged attackers with network access via HTTP gain unauthorized data access and modification, exploit requires user interaction from a different person.

  • 7.1 /10 High
    CVE-2026-87249 No auth

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a broken access control vulnerability caused by unauthenticated network access via HTTP, letting attackers modify critical data and cause partial denial of service, exploit requires user interaction.

  • 7.5 /10 High
    CVE-2026-87247 Auth required

    Oracle Hyperion Financial Management - Authentication Bypass

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a security vulnerability caused by unspecified issues in the Security component, letting low privileged attackers with network access via HTTP take over the system, exploit requires network access with low privileges.

  • 7.2 /10 High
    CVE-2026-87246 Auth required

    Oracle Hyperion Financial Management - Authentication Bypass

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a security vulnerability allowing high privileged attackers with network access via HTTP to compromise the system, leading to full takeover.

  • 8.0 /10 High
    CVE-2026-87245

    Oracle Hyperion Financial Management - Remote Code Execution

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a remote code execution caused by vulnerability in Security component, letting low privileged attackers with physical network access take over the system, exploit requires physical communication segment access.

  • 7.2 /10 High
    CVE-2026-87244 Auth required

    Oracle Hyperion Financial Management - Authentication Bypass

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a security vulnerability caused by improper access control, letting high privileged attackers with network access via HTTP take over the system, exploit requires high privileges.

  • 8.0 /10 High
    CVE-2026-87243

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a broken access control vulnerability caused by insufficient protection on the physical communication segment, letting unauthenticated attackers with physical network access modify or access critical data, exploit requires physical access to the communication segment.