Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 510 of 681

  • 8.2 /10 High
    CVE-2026-87197 No auth

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains an unauthorized access vulnerability caused by insufficient access controls in the Security component, letting unauthenticated network attackers access and modify critical data via HTTP.

  • 8.2 /10 High
    CVE-2026-87196 No auth

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains an unauthorized access vulnerability caused by insufficient access controls in the Security component, letting unauthenticated network attackers access and modify critical data via HTTP.

  • 7.4 /10 High
    CVE-2026-87195 No auth

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a security vulnerability caused by insufficient access controls, letting unauthenticated attackers with network access via TLS modify or access critical data, exploit requires network access via TLS.

  • 7.5 /10 High
    CVE-2026-87194 No auth

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains an information disclosure vulnerability caused by insufficient access controls in the Security component, letting unauthenticated attackers with network access via HTTP gain unauthorized access to critical data, exploit requires network access via HTTP.

  • 7.5 /10 High
    CVE-2026-87193 No auth

    Oracle Hyperion Financial Management - Information Disclosure

    Oracle Hyperion Financial Management 11.2.26.0.000 contains an information disclosure vulnerability caused by insufficient access control in the Security component, letting unauthenticated remote attackers access critical data via HTTP.

  • 7.1 /10 High
    CVE-2026-87192 Auth required

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains an unauthorized access and partial denial of service vulnerability caused by security flaws, letting low privileged attackers with network access via HTTP compromise critical data and cause partial DoS, exploit requires low privileges and network access.

  • 7.1 /10 High
    CVE-2026-87191 Auth required

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains an unauthorized access and partial denial of service vulnerability caused by security weaknesses, letting low privileged attackers with network access via HTTP access critical data and cause partial DoS, exploit requires low privileged network access.

  • 7.5 /10 High
    CVE-2026-87190 Auth required

    Oracle Hyperion Financial Management - Authentication Bypass

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a security vulnerability caused by an unspecified issue in the Security component, letting low privileged attackers with network access via HTTP take over the system, exploit requires network access with low privileges.

  • 9.1 /10 Critical
    CVE-2026-87189 Auth required

    Oracle Hyperion Financial Management - Authentication Bypass

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a security vulnerability caused by an easily exploitable flaw accessible via Oracle Net, letting high privileged attackers compromise the system, exploit requires network access with high privileges.

  • 9.8 /10 Critical
    CVE-2026-87188 No auth

    Oracle Hyperion Financial Management - Authentication Bypass

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a remote unauthenticated takeover vulnerability in Security component, letting attackers with network HTTP access fully compromise the system, exploit requires network access via HTTP.

  • 8.8 /10 High
    CVE-2026-87187

    Oracle Hyperion Financial Management - Authentication Bypass

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a remote takeover vulnerability caused by insecure security in the physical communication segment, letting unauthenticated attackers fully compromise the system, exploit requires access to the physical communication segment.

  • 9.6 /10 Critical
    CVE-2026-87186

    Oracle Hyperion Financial Management - Remote Code Execution

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a remote takeover vulnerability caused by an easily exploitable flaw in the security component, letting unauthenticated attackers with physical network access fully compromise the system, exploit requires physical access to the communication segment.

  • 8.8 /10 High
    CVE-2026-87185 Auth required

    Oracle Hyperion Financial Management - Authentication Bypass

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a security vulnerability caused by improper access control, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privilege network access.

  • 9.8 /10 Critical
    CVE-2026-87184 No auth

    Oracle Hyperion Financial Management - SQL Injection

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a sql injection caused by unauthenticated network access via SQL, letting attackers fully compromise the system, exploit requires network access without authentication.

  • 7.7 /10 High
    CVE-2026-87183 Auth required

    Oracle Hyperion Financial Management - Authentication Bypass

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a security vulnerability caused by improper handling in the security component, letting high privileged attackers with logon and user interaction take over the system, exploit requires human interaction from a user other than the attacker.