Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 520 of 681

  • 8.8 /10 High
    CVE-2026-83335 Auth required

    Oracle Business Intelligence Enterprise Edition - Remote Code Execution

    Oracle Business Intelligence Enterprise Edition 8.2.0.0.0 and 26.01.0.0.0 contains a remote code execution caused by a vulnerability in Analytics Server, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privilege network access.

  • 7.4 /10 High
    CVE-2026-83334 No auth

    Oracle Oracle Web Services Manager - Broken Access Control

    Oracle Fusion Middleware Oracle Web Services Manager 12.2.1.4.0 and 14.1.2.0.0 contains an unauthorized access and denial of service vulnerability caused by SOAP network access, letting unauthenticated attackers access or crash critical data, exploit requires network access via SOAP.

  • 7.5 /10 High
    CVE-2026-83333 No auth

    Oracle Database Server - Denial of Service

    Oracle Database Server 23.4.0-23.26.3 contains a denial of service vulnerability caused by unauthenticated network access via Oracle Net, letting attackers cause service hang or crash, exploit requires network access.

  • 7.1 /10 High
    CVE-2026-83332 Auth required

    Oracle Applications Framework - Broken Access Control

    Oracle Applications Framework 12.2.9-12.2.15 contains a broken access control vulnerability in Personalization, letting low privileged attackers with network access via HTTP gain unauthorized access and modify data.

  • 8.8 /10 High
    CVE-2026-83331 Auth required

    Oracle Applications Framework - Remote Code Execution

    Oracle Applications Framework 12.2.9-12.2.15 contains a remote code execution caused by a vulnerability in the Personalization component, letting low privileged attackers with network access via HTTP take over the framework, exploit requires low privileges.

  • 7.5 /10 High
    CVE-2026-83330 No auth

    Oracle Fusion Middleware Helidon - Denial of Service

    Oracle Fusion Middleware Helidon 4.0.0-4.5.4 contains a denial of service caused by vulnerability in WebSocket component, letting unauthenticated attackers with network access via HTTP cause application hang or crash, exploit requires no special privileges.

  • 8.8 /10 High
    CVE-2026-83329 Auth required

    Oracle Applications Framework - Remote Code Execution

    Oracle Applications Framework 12.2.9-12.2.15 contains a remote code execution caused by a vulnerability in the Personalization component, letting low privileged attackers with network access via HTTP take over the framework, exploit requires low privileges.

  • 7.2 /10 High
    CVE-2026-83328 Auth required

    Oracle Applications Framework - Remote Code Execution

    Oracle Applications Framework 12.2.3-12.2.15 contains a remote code execution caused by a vulnerability in the Personalization component, letting high privileged attackers with network access via HTTP take over the framework, exploit requires high privileges.

  • 9.8 /10 Critical
    CVE-2026-83327 No auth

    Oracle Oracle Applications Framework - Authentication Bypass

    Oracle E-Business Suite Oracle Applications Framework 12.2.3-12.2.15 contains a remote unauthenticated takeover vulnerability caused by insecure SOAP access in Personalization component, letting attackers fully compromise the framework, exploit requires network access via SOAP.

  • 7.5 /10 High
    CVE-2026-83326 No auth

    Oracle Siebel CRM Integration - Broken Access Control

    Oracle Siebel CRM Integration 25.12-26.7 contains an unauthorized access vulnerability caused by insufficient access controls in Open Integration, letting unauthenticated network attackers access critical data via HTTP, exploit requires network access.

  • 7.2 /10 High
    CVE-2026-83325 Auth required

    Oracle Business Intelligence Enterprise Edition - Remote Code Execution

    Oracle Business Intelligence Enterprise Edition 8.2.0.0.0 and 26.01.0.0.0 contains a remote code execution caused by platform security flaws, letting high privileged attackers with network access via HTTP take over the system, exploit requires high privileges.

  • 7.1 /10 High
    CVE-2026-83324 Auth required

    Oracle Business Intelligence Enterprise Edition - Broken Access Control

    Oracle Business Intelligence Enterprise Edition 8.2.0.0.0 and 26.01.0.0.0 contains a broken access control vulnerability in BI Platform Security, letting low privileged attackers with network access via HTTP create, delete, modify, or read critical data, exploit requires network access with low privileges.

  • 7.5 /10 High
    CVE-2026-83323 Auth required

    Oracle Business Intelligence Enterprise Edition - Authentication Bypass

    Oracle Business Intelligence Enterprise Edition 26.01.0.0.0 contains an authentication bypass caused by platform security flaws, letting low privileged attackers with logon and user interaction takeover the system, exploit requires human interaction.

  • 7.2 /10 High
    CVE-2026-83322 Auth required

    Oracle Business Intelligence Enterprise Edition - Remote Code Execution

    Oracle Business Intelligence Enterprise Edition 8.2.0.0.0 and 26.01.0.0.0 contains a remote code execution caused by platform security flaws, letting high privileged attackers with network access via HTTP take over the system, exploit requires high privileges.

  • 8.5 /10 High
    CVE-2026-83321 Auth required

    Oracle Business Intelligence Enterprise Edition - Broken Access Control

    Oracle Business Intelligence Enterprise Edition 8.2.0.0.0 and 26.01.0.0.0 contains an unauthorized data access and modification vulnerability caused by insufficient access controls in Analytics Actions, letting low privileged attackers with network HTTP access compromise critical data, exploit requires low privileged network access.