Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 521 of 681

  • 7.6 /10 High
    CVE-2026-83320 Auth required

    Oracle BI Publisher - Authorization Bypass

    Oracle BI Publisher 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contains an authorization bypass caused by improper access control in Administration component, letting low privileged attackers with network access via HTTP gain unauthorized data access and modification, exploit requires user interaction from another person.

  • 7.7 /10 High
    CVE-2026-83319 Auth required

    Oracle BI Publisher - Broken Access Control

    Oracle BI Publisher 12.2.1.4.0 contains an information disclosure vulnerability caused by flaws in the Web Service API, letting low privileged attackers with network access via SOAP gain unauthorized access to critical data, exploit requires low privileges and network access.

  • 7.5 /10 High
    CVE-2026-83318 Auth required

    Oracle BI Publisher - Remote Code Execution

    Oracle BI Publisher 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contain a remote code execution caused by a vulnerability in the Administration component, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileges and network access.

  • 7.8 /10 High
    CVE-2026-83317 Auth required

    Oracle Business Intelligence Enterprise Edition - Privilege Escalation

    Oracle Business Intelligence Enterprise Edition 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contains a privilege escalation vulnerability in the Installation component, letting low privileged attackers with logon compromise the system, exploit requires attacker logon to infrastructure.

  • 7.0 /10 High
    CVE-2026-83316 Auth required

    Oracle Business Intelligence Enterprise Edition - Privilege Escalation

    Oracle Business Intelligence Enterprise Edition 26.01.0.0.0 contains a privilege escalation vulnerability in Platform Security, letting low privileged attackers with logon compromise the system, exploit requires local access with credentials.

  • 8.8 /10 High
    CVE-2026-83315 Auth required

    Oracle BI Publisher - Remote Code Execution

    Oracle BI Publisher 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contain a remote code execution caused by a vulnerability in BI Platform Security, letting low privileged attackers with network access via SOAP fully compromise the system, exploit requires low privileges and network access.

  • 8.1 /10 High
    CVE-2026-83314 Auth required

    Oracle BI Publisher - Broken Access Control

    Oracle BI Publisher 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contain an integrity and availability vulnerability caused by improper access control in Web Service API, letting low privileged attackers with network access via SOAP modify critical data or cause denial of service, exploit requires low privileged network access.

  • 7.7 /10 High
    CVE-2026-83313 Auth required

    Oracle BI Publisher - Broken Access Control

    Oracle BI Publisher 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contain an unauthorized access vulnerability caused by insufficient access controls in BI Platform Security, letting low privileged attackers with network access via HTTP access critical data, exploit requires low privileged network access.

  • 7.7 /10 High
    CVE-2026-83312 Auth required

    Oracle BI Publisher - Broken Access Control

    Oracle BI Publisher 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contains an unauthorized access vulnerability caused by insufficient access controls, letting low privileged attackers with network access via HTTP access critical or all accessible data, exploit requires low privilege network access.

  • 8.5 /10 High
    CVE-2026-83311 Auth required

    Oracle BI Publisher - Broken Access Control

    Oracle BI Publisher 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contain an unauthorized data access and modification vulnerability caused by insufficient access control in BI Platform Security, letting low privileged attackers with network SOAP access compromise data, exploit requires low privileged network access via SOAP.

  • 8.7 /10 High
    CVE-2026-83310 Auth required

    Oracle BI Publisher - Authorization Bypass

    Oracle BI Publisher 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contain an authorization bypass caused by improper access control in BI Platform Security, letting low privileged attackers with network access via HTTP create, delete, or modify critical data, exploit requires user interaction from another person.

  • 8.5 /10 High
    CVE-2026-83309 Auth required

    Oracle BI Publisher - Broken Access Control

    Oracle BI Publisher 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contains an unauthorized data access and modification vulnerability caused by insufficient access controls in the Web Server component, letting low privileged attackers with network access via HTTP compromise data integrity and confidentiality, exploit requires low privileged network access.

  • 8.1 /10 High
    CVE-2026-83308 Auth required

    Oracle Analytics Oracle BI Publisher - Broken Access Control

    Oracle Analytics Oracle BI Publisher 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contain a broken access control caused by insufficient privilege checks in BI Platform Security, letting low privileged attackers with network SOAP access modify critical data or cause denial of service.

  • 8.3 /10 High
    CVE-2026-83307 Auth required

    Oracle Analytics Oracle BI Publisher - Broken Access Control

    Oracle Analytics Oracle BI Publisher 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contain a broken access control vulnerability in BI Platform Security, letting low privileged attackers with network HTTP access create, delete, modify, or access critical data and cause partial denial of service.

  • 8.8 /10 High
    CVE-2026-83306 Auth required

    Oracle JDeveloper - Remote Code Execution

    Oracle JDeveloper 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution caused by a vulnerability in Resource Catalog Services, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privilege network access.