Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 516 of 681

  • 9.8 /10 Critical
    CVE-2026-83462 No auth

    Oracle Mobile Application Server - Remote Code Execution

    Oracle Mobile Application Server 12.2.3-12.2.15 contains a remote code execution vulnerability caused by unauthenticated network access via TCP, letting unauthenticated attackers fully compromise the server, exploit requires network access.

  • 8.2 /10 High
    CVE-2026-83461 No auth

    Oracle Mobile Application Server - Broken Access Control

    Oracle Mobile Application Server 12.2.3-12.2.15 contains an unauthenticated network access vulnerability in MWA Terminal Server, letting attackers gain unauthorized access to critical data and cause partial denial of service, exploit requires network access via TCP.

  • 8.1 /10 High
    CVE-2026-83457 Auth required

    Oracle Demand Signal Repository - Broken Access Control

    Oracle Demand Signal Repository 12.2.3-12.2.15 contains a broken access control vulnerability in Internal Operations, letting low privileged attackers with network HTTP access modify critical data or cause denial of service.

  • 8.8 /10 High
    CVE-2026-83456 Auth required

    Oracle Demand Signal Repository - Remote Code Execution

    Oracle Demand Signal Repository 12.2.3-12.2.15 contains a remote code execution caused by an easily exploitable vulnerability in Internal Operations, letting low privileged attackers with network access via HTTP take over the system, exploit requires network access.

  • 8.1 /10 High
    CVE-2026-83455 Auth required

    Oracle Demand Signal Repository - Broken Access Control

    Oracle Demand Signal Repository 12.2.3-12.2.15 contains a broken access control vulnerability caused by insufficient privilege checks in Internal Operations, letting low privileged attackers with network access via HTTP modify or access critical data.

  • 8.8 /10 High
    CVE-2026-83454 Auth required

    Oracle Document Management and Collaboration - Remote Code Execution

    Oracle Document Management and Collaboration 12.2.3-12.2.15 contains a remote code execution caused by internal operations vulnerability, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileges.

  • 7.2 /10 High
    CVE-2026-83453 Auth required

    Oracle Document Management and Collaboration - Remote Code Execution

    Oracle Document Management and Collaboration 12.2.3-12.2.15 contains a remote code execution caused by internal operations vulnerability, letting high privileged attackers with network access via HTTP take over the system, exploit requires high privileges.

  • 9.8 /10 Critical
    CVE-2026-83452 No auth

    Oracle Document Management and Collaboration - Authentication Bypass

    Oracle Document Management and Collaboration 12.2.3-12.2.15 contains a remote unauthenticated takeover vulnerability caused by internal operations flaw, letting attackers with network HTTP access fully compromise the system, exploit requires no authentication.

  • 8.5 /10 High
    CVE-2026-83451 Auth required

    Oracle Oracle Product Workbench - Authentication Bypass

    Oracle E-Business Suite Oracle Product Workbench 12.2.3-12.2.15 contains a takeover vulnerability caused by an internal operations flaw, letting low privileged attackers with network access via HTTP compromise the product, exploit requires low privileges and network access.

  • 8.0 /10 High
    CVE-2026-83450 Auth required

    Oracle Bills of Material - Authentication Bypass

    Oracle Bills of Material 12.2.3-12.2.15 contains a takeover vulnerability caused by a difficult to exploit issue in Setup Workbench, letting high privileged attackers with network access via HTTP compromise the product, exploit requires high privileges.

  • 8.5 /10 High
    CVE-2026-83449 Auth required

    Oracle Bills of Material - Broken Access Control

    Oracle Bills of Material 12.2.3-12.2.15 contains an unauthorized access and partial denial of service vulnerability caused by insufficient access controls in Internal Operations, letting low privileged attackers with network access via HTTP compromise critical data and cause partial service disruption, exploit requires low privileged network access.

  • 8.1 /10 High
    CVE-2026-83448 Auth required

    Oracle Bills of Material - Broken Access Control

    Oracle Bills of Material 12.2.3-12.2.15 contains a broken access control vulnerability caused by insufficient privilege checks in Internal Operations, letting low privileged attackers with network access via HTTP modify or access critical data.

  • 8.1 /10 High
    CVE-2026-83447 Auth required

    Oracle Bills of Material - Broken Access Control

    Oracle Bills of Material 12.2.3-12.2.15 contains a broken access control vulnerability caused by insufficient privilege checks in Internal Operations, letting low privileged attackers with network access via HTTP modify or access critical data.

  • 8.1 /10 High
    CVE-2026-83446 Auth required

    Oracle Financials Common Modules - Broken Access Control

    Oracle Financials Common Modules 12.2.3-12.2.15 contains a broken access control vulnerability caused by insufficient privilege checks, letting low privileged attackers with network access via HTTP modify or access critical data, exploit requires low privilege network access.

  • 8.8 /10 High
    CVE-2026-83445 Auth required

    Oracle Complex Maintenance, Repair and Overhaul - Authentication Bypass

    Oracle Complex Maintenance, Repair and Overhaul 12.2.3-12.2.15 contains a vulnerability in Internal Operations, letting low privileged attackers with network access via HTTPS take over the product, exploit requires low privileges.