Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 517 of 681

  • 8.8 /10 High
    CVE-2026-83444 Auth required

    Oracle Product Hub - Remote Code Execution

    Oracle Product Hub 12.2.3-12.2.15 contains a remote code execution vulnerability caused by an easily exploitable flaw in Internal Operations, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileges and network access.

  • 7.2 /10 High
    CVE-2026-83442 Auth required

    Oracle Product Hub - Authentication Bypass

    Oracle Product Hub 12.2.3-12.2.15 contains a vulnerability in Internal Operations, letting high privileged attackers with network access via HTTP take over the product, exploit requires high privileges.

  • 7.2 /10 High
    CVE-2026-83440 Auth required

    Oracle Product Hub - Authentication Bypass

    Oracle Product Hub 12.2.3-12.2.15 contains a vulnerability in Internal Operations, letting high privileged attackers with network access via HTTP take over the product, exploit requires high privileges.

  • 8.1 /10 High
    CVE-2026-83439 Auth required

    Oracle Fusion Middleware Helidon - Broken Access Control

    Oracle Fusion Middleware Helidon 3.0.0-3.2.20 and 4.0.0-4.5.4 contains an access control vulnerability in helidon-security-providers-idcs-mapper, letting low privileged attackers with network access via HTTP create, delete, or modify critical data, exploit requires low privilege network access.

  • 8.2 /10 High
    CVE-2026-83438 Auth required

    Oracle E-Business Suite Oracle Engineering - Broken Access Control

    Oracle E-Business Suite Oracle Engineering 12.2.3-12.2.15 contains a broken access control vulnerability in Internal Operations, letting low privileged attackers with network access via HTTP create, delete, or modify critical data, exploit requires network access with low privileges.

  • 7.7 /10 High
    CVE-2026-83437 Auth required

    Oracle Engineering - Broken Access Control

    Oracle Engineering product of Oracle E-Business Suite 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by insufficient access control in Change Management component, letting low privileged attackers with network access via HTTP access critical data, exploit requires low privilege network access.

  • 7.1 /10 High
    CVE-2026-83436 Auth required

    Oracle Depot Repair - Broken Access Control

    Oracle Depot Repair 12.2.3-12.2.15 contains an unauthorized access vulnerability in Recall Management, letting low privileged attackers with network access via HTTP access critical data and cause partial denial of service, exploit requires low privilege network access.

  • 8.2 /10 High
    CVE-2026-83435 Auth required

    Oracle Bills of Material - Broken Access Control

    Oracle Bills of Material 12.2.13-12.2.15 contains a broken access control vulnerability caused by improper authorization in Internal Operations, letting low privileged attackers with network access via HTTP create, delete, or modify critical data, exploit requires low privileges and network access.

  • 8.1 /10 High
    CVE-2026-83434 Auth required

    Oracle Oracle Product Workbench - Broken Access Control

    Oracle E-Business Suite Oracle Product Workbench 12.2.3-12.2.15 contains a broken access control vulnerability caused by insufficient privilege checks in Internal Operations, letting low privileged attackers with network access via HTTP create, delete, or modify critical data, exploit requires low privileged network access.

  • 8.1 /10 High
    CVE-2026-83432 Auth required

    Oracle Oracle Depot Repair - Broken Access Control

    Oracle E-Business Suite Oracle Depot Repair 12.2.3-12.2.15 contains a broken access control vulnerability in Estimate and Actual Charges component, letting low privileged attackers with network access via HTTP create, delete, or modify critical data, exploit requires low privileged network access.

  • 8.1 /10 High
    CVE-2026-83430 Auth required

    Oracle Workbench - Broken Access Control

    Oracle E-Business Suite Workbench 12.2.3-12.2.15 contains a broken access control vulnerability in Internal Operations, letting low privileged attackers with network access via HTTP create, delete, or modify critical data, exploit requires low privilege network access.

  • 8.1 /10 High
    CVE-2026-83429 Auth required

    Oracle Demand Signal Repository - Broken Access Control

    Oracle Demand Signal Repository 12.2.3-12.2.15 contains a broken access control vulnerability caused by insufficient authorization checks in Internal Operations, letting low privileged attackers with network access via HTTP modify or access critical data.

  • 8.1 /10 High
    CVE-2026-83428 Auth required

    Oracle Demand Signal Repository - Broken Access Control

    Oracle Demand Signal Repository 12.2.3-12.2.15 contains a broken access control vulnerability caused by insufficient privilege checks in Internal Operations, letting low privileged attackers with network access via HTTP modify or access critical data.

  • 8.5 /10 High
    CVE-2026-83425 Auth required

    Oracle Oracle Complex Maintenance, Repair and Overhaul - Broken Access Control

    Oracle E-Business Suite Oracle Complex Maintenance, Repair and Overhaul 12.2.12-12.2.15 contains an unauthorized access and partial denial of service vulnerability caused by insufficient access controls in Internal Operations, letting low privileged attackers with network access via HTTP compromise critical data and cause partial service disruption, exploit requires low privileged network access.

  • 7.5 /10 High
    CVE-2026-83424 No auth

    Oracle JDeveloper - Information Disclosure

    Oracle JDeveloper 12.2.1.4.0 and 14.1.2.0.0 contain an information disclosure vulnerability caused by unauthenticated network access via HTTP, letting attackers access critical or all accessible data remotely, exploit requires network access.