Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 511 of 681

  • 8.8 /10 High
    CVE-2026-87182 Auth required

    Oracle Hyperion Financial Management - Privilege Escalation

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a privilege escalation vulnerability in Security component, letting low privileged attackers with logon to the infrastructure take over the system, exploit requires attacker logon access.

  • 8.8 /10 High
    CVE-2026-87181 Auth required

    Oracle Hyperion Financial Management - Authentication Bypass

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a security vulnerability allowing low privileged attackers with network access via HTTP to compromise the system, letting attackers take over the product, exploit requires low privilege network access.

  • 8.8 /10 High
    CVE-2026-87180 Auth required

    Oracle Hyperion Financial Management - Authentication Bypass

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a security vulnerability caused by improper access control, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privilege network access.

  • 8.8 /10 High
    CVE-2026-87179 Auth required

    Oracle Hyperion Financial Management - Authentication Bypass

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a security vulnerability caused by insufficient access control, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileges.

  • 8.7 /10 High
    CVE-2026-87178 Auth required

    Oracle Hyperion Financial Management - SQL Injection

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a SQL injection caused by insufficient input validation in the Security component, letting high privileged attackers with network access compromise data integrity and confidentiality, exploit requires high privileges.

  • 8.5 /10 High
    CVE-2026-87177 Auth required

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains an unauthorized access vulnerability caused by insufficient access controls in the Security component, letting low privileged attackers with network access via HTTP gain unauthorized read and write access, exploit requires low privileged network access.

  • 9.1 /10 Critical
    CVE-2026-87176 No auth

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains an unauthorized data access vulnerability in Security component, letting unauthenticated network attackers create, delete, or modify critical data, exploit requires network access via TCP.

  • 9.1 /10 Critical
    CVE-2026-87175 No auth

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains an unauthorized data access vulnerability caused by insufficient access controls in the Security component, letting unauthenticated network attackers create, delete, or modify critical data.

  • 8.2 /10 High
    CVE-2026-87174 No auth

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains an unauthorized access vulnerability caused by insufficient access controls in the Security component, letting unauthenticated network attackers access and modify critical data remotely, exploit requires network access via TCP.

  • 9.1 /10 Critical
    CVE-2026-87173 No auth

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains an unauthorized data access vulnerability caused by insufficient access controls in the Security component, letting unauthenticated network attackers create, delete, or modify critical data.

  • 9.9 /10 Critical
    CVE-2026-87172 Auth required

    Oracle Hyperion Financial Management - Authentication Bypass

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a security vulnerability caused by an unspecified flaw in the Security component, letting low privileged attackers with network access via HTTP take over the system, exploit requires network access with low privileges.

  • 8.7 /10 High
    CVE-2026-87171 No auth

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a broken access control vulnerability in Security component, letting unauthenticated attackers with network access via HTTPS create, delete, or modify critical data, exploit requires network access with high complexity.

  • 9.1 /10 Critical
    CVE-2026-87170 No auth

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains an unauthorized access vulnerability in Security component, letting unauthenticated network attackers via HTTP create, delete, or modify critical data, exploit requires network access.

  • 8.1 /10 High
    CVE-2026-87168 Auth required

    Oracle Oracle Purchasing - Broken Access Control

    Oracle E-Business Suite Oracle Purchasing 12.2.10-12.2.15 contains a broken access control vulnerability caused by insufficient privilege checks in G-Invoicing component, letting low privileged attackers with network access via HTTP create, delete, or modify critical data, exploit requires low privileged network access.

  • 8.1 /10 High
    CVE-2026-87167 Auth required

    Oracle Purchasing - Broken Access Control

    Oracle E-Business Suite Oracle Purchasing 12.2.11-12.2.15 contains a broken access control vulnerability caused by insufficient privilege checks in G-Invoicing component, letting low privileged attackers with network access via HTTP create, delete, or modify critical data, exploit requires low privileged network access.