Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 519 of 681

  • 7.1 /10 High
    CVE-2026-83352 Auth required

    Oracle Oracle XML Gateway - Broken Access Control

    Oracle E-Business Suite Oracle XML Gateway 12.2.3-12.2.15 contains an unauthorized access and partial denial of service vulnerability caused by insufficient access controls in Install component, letting low privileged attackers with network access via HTTP access critical data and cause partial DoS, exploit requires low privilege network access.

  • 8.1 /10 High
    CVE-2026-83351 No auth

    Oracle Database Server - Remote Code Execution

    Oracle Database Server 23.4.0-23.26.3 contains a remote code execution vulnerability in the RDBMS component exploitable via Oracle Net, letting unauthenticated attackers with network access take over the RDBMS, exploit requires high attack complexity.

  • 7.5 /10 High
    CVE-2026-83350 No auth

    Oracle Database Server - Denial of Service

    Oracle Database Server 21.3-21.23 and 23.4.0-23.26.3 contain a denial of service caused by a vulnerability in Oracle Net Services, letting unauthenticated attackers with network access cause service hang or crash, exploit requires network access.

  • 7.5 /10 High
    CVE-2026-83349 No auth

    Oracle Database Server - Denial of Service

    Oracle Database Server 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3 contain a denial of service caused by unauthenticated network access via Oracle Net, letting attackers cause service hang or crash, exploit requires network access.

  • 8.8 /10 High
    CVE-2026-83348 Auth required

    Oracle Database Server - Remote Code Execution

    Oracle Database Server 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3 contain a remote code execution caused by improper privilege validation in RDBMS component, letting low privileged attackers with Create DB Link privilege takeover the RDBMS, exploit requires network access via Oracle Net.

  • 7.1 /10 High
    CVE-2026-83345 Auth required

    Oracle Oracle XML Gateway - Broken Access Control

    Oracle E-Business Suite Oracle XML Gateway 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by insufficient access controls in Install component, letting low privileged attackers with network access via HTTP access critical data and cause partial denial of service, exploit requires low privileges and network access.

  • 7.2 /10 High
    CVE-2026-83344 Auth required

    Oracle Identity Manager Connector - Authentication Bypass

    Oracle Identity Manager Connector 12.2.1.4.0 and 14.1.2.1.0 contains a remote takeover vulnerability caused by an easily exploitable flaw in Database Application Table component, letting high privileged attackers with network access via HTTP fully compromise the system, exploit requires high privileges.

  • 8.2 /10 High
    CVE-2026-83343 No auth

    Oracle Utilities Network Management System - Broken Access Control

    Oracle Utilities Network Management System 2.5.0.2.0-2.5.0.2.13, 2.6.0.1.0-2.6.0.12B, 2.6.0.2.0-2.6.0.2.10A, and 25.12.0.0.0-25.12.0.0.3 contains an unauthorized access vulnerability caused by improper access control in the system wide component, letting unauthenticated attackers with network access via HTTP access and modify critical data, exploit requires network access via HTTP.

  • 7.8 /10 High
    CVE-2026-83342 Auth required

    Oracle Utilities Network Management System - Authentication Bypass

    Oracle Utilities Network Management System 2.4.0.1.0-2.4.0.1.33, 2.5.0.1.0-2.5.0.1.19, 2.5.0.2.0-2.5.0.2.13, 2.6.0.1.0-2.6.0.12B, 2.6.0.2.0-2.6.0.2.10A, and 25.12.0.0.0-25.12.0.0.3 contains a takeover vulnerability caused by an easily exploitable flaw allowing low privileged logged-in attackers to compromise the system, letting attackers fully control the system, exploit requires attacker to have logon to the infrastructure.

  • 7.5 /10 High
    CVE-2026-83341 No auth

    Oracle Oracle Applications Manager - Broken Access Control

    Oracle E-Business Suite Oracle Applications Manager 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by improper access control in Command Line - RapidClone, letting unauthenticated attackers with network access via HTTP access critical data, exploit requires network access via HTTP.

  • 8.8 /10 High
    CVE-2026-83340 Auth required

    Oracle Identity Manager - Authentication Bypass

    Oracle Identity Manager 12.2.1.4.0 and 14.1.2.1.0 contain a security vulnerability caused by improper access control, letting low privileged attackers with network access via HTTP take over the system, exploit requires network access with low privileges.

  • 9.8 /10 Critical
    CVE-2026-83339 No auth

    Oracle WebCenter Enterprise Capture - Remote Code Execution

    Oracle WebCenter Enterprise Capture 12.2.1.4.0 and 14.1.2.0.0 contains a remote code execution caused by unauthenticated network access via HTTP, letting unauthenticated attackers fully compromise the system, exploit requires network access via HTTP.

  • 8.8 /10 High
    CVE-2026-83338 Auth required

    Oracle E-Business Suite Oracle Applications Manager - Remote Code Execution

    Oracle E-Business Suite Oracle Applications Manager 12.2.3-12.2.15 contains a remote code execution caused by vulnerability in Oracle Diagnostics Interfaces, letting low privileged attackers with network access via HTTP take over the application, exploit requires low privileges.

  • 7.8 /10 High
    CVE-2026-83337 Auth required

    Oracle Middleware Common Libraries and Tools - Remote Code Execution

    Oracle Middleware Common Libraries and Tools 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 contain a remote diagnostic agent vulnerability caused by insufficient privilege checks, letting low privileged logged-in attackers take over the product.

  • 7.8 /10 High
    CVE-2026-83336 Auth required

    Oracle Business Intelligence Enterprise Edition - Privilege Escalation

    Oracle Business Intelligence Enterprise Edition 8.2.0.0.0 and 26.01.0.0.0 contains a privilege escalation vulnerability in Analytics Server, letting low privileged attackers with logon compromise the system, exploit requires attacker logon.