Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 522 of 681

  • 8.6 /10 High
    CVE-2026-83305 No auth

    Oracle BI Publisher - Broken Access Control

    Oracle BI Publisher 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contains an unauthorized access vulnerability caused by insufficient access controls in BI Platform Security, letting unauthenticated attackers with network access via HTTP compromise data confidentiality, integrity, and availability.

  • 8.9 /10 High
    CVE-2026-83304 No auth

    Oracle Business Intelligence Enterprise Edition - Broken Access Control

    Oracle Business Intelligence Enterprise Edition 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contains an unauthorized data access and partial denial of service vulnerability in Analytics Web General, letting unauthenticated network attackers compromise data integrity, confidentiality, and availability, exploit requires network access via HTTP.

  • 8.5 /10 High
    CVE-2026-83303 Auth required

    Oracle BI Publisher - Broken Access Control

    Oracle BI Publisher 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contain a broken access control vulnerability caused by insufficient authorization in BI Platform Security, letting low privileged attackers with network SOAP access modify and read critical data, exploit requires low privileged network access.

  • 8.5 /10 High
    CVE-2026-83302 Auth required

    Oracle Analytics Oracle BI Publisher - Broken Access Control

    Oracle Analytics Oracle BI Publisher 12.2.1.4.0 contains an unauthorized access and partial denial of service vulnerability caused by insufficient access controls in BI Publisher Security, letting low privileged attackers with network access via HTTP compromise critical data and cause partial service disruption, exploit requires low privileged network access.

  • 8.8 /10 High
    CVE-2026-83301 Auth required

    Oracle Business Intelligence Enterprise Edition - Remote Code Execution

    Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 contains a remote code execution vulnerability in Service Administration UI, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privilege network access.

  • 7.1 /10 High
    CVE-2026-83300 Auth required

    Oracle Oracle XML Gateway - Broken Access Control

    Oracle E-Business Suite Oracle XML Gateway 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by insufficient access controls in Install component, letting low privileged attackers with network access via HTTP access critical data and cause partial denial of service, exploit requires low privileged network access.

  • 8.1 /10 High
    CVE-2026-83299 No auth

    Oracle Business Intelligence Enterprise Edition - Remote Code Execution

    Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 contains a remote code execution vulnerability caused by an unspecified issue in Analytics Web General, letting unauthenticated attackers with network access via HTTP take over the system, exploit requires high attack complexity.

  • 7.2 /10 High
    CVE-2026-83298 Auth required

    Oracle Analytics Oracle BI Publisher - Remote Code Execution

    Oracle Analytics Oracle BI Publisher 12.2.1.4.0 contains a remote code execution caused by a vulnerability in BI Platform Security, letting high privileged attackers with network access via HTTP take over the system, exploit requires high privileges.

  • 8.1 /10 High
    CVE-2026-83297 Auth required

    Oracle BI Publisher - Broken Access Control

    Oracle BI Publisher 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contain a broken access control vulnerability caused by improper authorization in BI Platform Security, letting low privileged attackers with network LDAP access modify or access critical data.

  • 7.5 /10 High
    CVE-2026-83296 Auth required

    Oracle Business Intelligence Enterprise Edition - Remote Code Execution

    Oracle Business Intelligence Enterprise Edition 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contain a remote code execution caused by a vulnerability in BI Search, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileges and network access.

  • 7.5 /10 High
    CVE-2026-83295 Auth required

    Oracle Business Intelligence Enterprise Edition - Remote Code Execution

    Oracle Business Intelligence Enterprise Edition 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contains a remote code execution caused by vulnerability in Presentation Services component, letting low privileged attackers with network access via SOAP takeover the system, exploit requires low privileges and network access.

  • 7.8 /10 High
    CVE-2026-83294 No auth

    Oracle Business Intelligence Enterprise Edition - Authentication Bypass

    Oracle Business Intelligence Enterprise Edition 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contain a takeover vulnerability caused by platform security flaws, letting unauthenticated attackers with infrastructure logon compromise the system, exploit requires user interaction.

  • 7.8 /10 High
    CVE-2026-83293 Auth required

    Oracle Business Intelligence Enterprise Edition - Privilege Escalation

    Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 contains a privilege escalation vulnerability in FNDN component, letting low privileged attackers with logon compromise the system, exploit requires attacker to have logon access.

  • 7.5 /10 High
    CVE-2026-83292 Auth required

    Oracle Business Intelligence Enterprise Edition - Authentication Bypass

    Oracle Business Intelligence Enterprise Edition 8.2.0.0.0 and 26.01.0.0.0 contains a security vulnerability in Platform Security, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileges and network access.

  • 7.8 /10 High
    CVE-2026-83291 Auth required

    Oracle Business Intelligence Enterprise Edition - Privilege Escalation

    Oracle Business Intelligence Enterprise Edition 8.2.0.0.0 and 26.01.0.0.0 contains a privilege escalation vulnerability in Platform Security, letting low privileged attackers with logon to the infrastructure take over the system, exploit requires attacker logon access.