Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 513 of 681

  • 7.7 /10 High
    CVE-2026-87151 Auth required

    Oracle Bills of Material - Broken Access Control

    Oracle Bills of Material 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by insufficient access control in Setup Workbench, letting low privileged attackers with network access via HTTP access critical data, exploit requires low privileges.

  • 8.8 /10 High
    CVE-2026-87150 Auth required

    Oracle Bills of Material - Remote Code Execution

    Oracle Bills of Material 12.2.3-12.2.15 contains a remote code execution vulnerability caused by improper access control in Setup Workbench, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privilege network access.

  • 7.1 /10 High
    CVE-2026-87149 Auth required

    Oracle Contract Lifecycle Management for Public Sector - Broken Access Control

    Oracle Contract Lifecycle Management for Public Sector 12.2.8-12.2.15 contains an unauthorized access vulnerability caused by insufficient access controls in Award/PO component, letting low privileged attackers with network access via HTTP access and modify critical data.

  • 7.5 /10 High
    CVE-2026-87148 No auth

    Oracle Hyperion Data Relationship Management - Denial of Service

    Oracle Hyperion Data Relationship Management 11.2.26.0.000 contains a denial of service caused by an easily exploitable vulnerability in access and security, letting unauthenticated remote attackers cause application hang or crash, exploit requires network access via HTTP.

  • 7.7 /10 High
    CVE-2026-87147 Auth required

    Oracle Hyperion Data Relationship Management - Broken Access Control

    Oracle Hyperion Data Relationship Management 11.2.26.0.000 contains a broken access control vulnerability in Access and security, letting high privileged attackers with network access via HTTP create, delete, or modify critical data and access all accessible data, exploit requires high privileges.

  • 7.1 /10 High
    CVE-2026-87146 Auth required

    Oracle Hyperion Data Relationship Management - Broken Access Control

    Oracle Hyperion Data Relationship Management 11.2.26.0.000 contains an access control vulnerability in Access and security, letting low privileged attackers with network access via HTTP gain unauthorized access and modify data, exploit requires low privilege network access.

  • 7.3 /10 High
    CVE-2026-87145 No auth

    Oracle Hyperion Data Relationship Management - Broken Access Control

    Oracle Hyperion Data Relationship Management 11.2.26.0.000 contains an access control vulnerability in Access and security, letting unauthenticated network attackers via HTTP perform unauthorized read, update, insert, delete, and partial denial of service, exploit requires network access via HTTP.

  • 7.6 /10 High
    CVE-2026-87144 Auth required

    Oracle Hyperion Data Relationship Management - Broken Access Control

    Oracle Hyperion Data Relationship Management 11.2.26.0.000 contains an access control vulnerability in Access and security, letting low privileged attackers with network access via HTTP and user interaction compromise data confidentiality and integrity, exploit requires user interaction from a different person.

  • 7.4 /10 High
    CVE-2026-87143 No auth

    Oracle Hyperion Data Relationship Management - Broken Access Control

    Oracle Hyperion Data Relationship Management 11.2.26.0.000 contains an access control vulnerability in Access and security component, letting unauthenticated network attackers create, delete, or modify critical data, exploit requires network access via TCP with high complexity.

  • 7.1 /10 High
    CVE-2026-87142 No auth

    Oracle Hyperion Data Relationship Management - Broken Access Control

    Oracle Hyperion Data Relationship Management 11.2.26.0.000 contains a broken access control vulnerability in Access and security, letting unauthenticated attackers with network access via HTTPS cause data modification and partial denial of service, exploit requires user interaction.

  • 7.7 /10 High
    CVE-2026-87141 Auth required

    Oracle Hyperion Data Relationship Management - Broken Access Control

    Oracle Hyperion Data Relationship Management 11.2.26.0.000 contains an unauthorized access vulnerability caused by insufficient access control in Access and security component, letting low privileged attackers with network access via HTTP gain unauthorized access to critical data, exploit requires low privileged network access.

  • 7.5 /10 High
    CVE-2026-87140 Auth required

    Oracle Hyperion Data Relationship Management - Authentication Bypass

    Oracle Hyperion Data Relationship Management 11.2.26.0.000 contains a vulnerability in Access and security, letting low privileged attackers with network access via HTTP take over the system, exploit requires network access with low privileges.

  • 7.5 /10 High
    CVE-2026-87139 Auth required

    Oracle Hyperion Data Relationship Management - Authentication Bypass

    Oracle Hyperion Data Relationship Management 11.2.26.0.000 contains a takeover vulnerability caused by an access and security issue, letting low privileged attackers with network access via HTTP compromise the system, exploit requires network access with low privileges.

  • 7.5 /10 High
    CVE-2026-87138 No auth

    Oracle Hyperion Data Relationship Management - Denial of Service

    Oracle Hyperion Data Relationship Management 11.2.26.0.000 contains a denial of service caused by unauthenticated network access via SOAP in Access and security component, letting unauthenticated attackers cause application hang or crash, exploit requires network access.

  • 7.6 /10 High
    CVE-2026-87137 Auth required

    Oracle Hyperion Data Relationship Management - Broken Access Control

    Oracle Hyperion Data Relationship Management 11.2.26.0.000 contains an access control vulnerability in Access and security, letting low privileged attackers with network access via HTTP and user interaction gain unauthorized access and modify data, exploit requires user interaction from a different person.