Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 523 of 681

  • 7.8 /10 High
    CVE-2026-83290 Auth required

    Oracle Business Intelligence Enterprise Edition - Privilege Escalation

    Oracle Business Intelligence Enterprise Edition 8.2.0.0.0 and 26.01.0.0.0 contains a privilege escalation vulnerability in Platform Security, letting low privileged attackers with logon to the infrastructure take over the product, exploit requires attacker logon.

  • 7.5 /10 High
    CVE-2026-83289 Auth required

    Oracle Business Intelligence Enterprise Edition - Remote Code Execution

    Oracle Business Intelligence Enterprise Edition 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contains a remote code execution vulnerability caused by flaws in Analytics Web General component, letting low privileged attackers with network access via SOAP fully compromise the system, exploit requires network access with low privileges.

  • 7.8 /10 High
    CVE-2026-83288 Auth required

    Oracle Business Intelligence Enterprise Edition - Remote Code Execution

    Oracle Business Intelligence Enterprise Edition 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contains a remote code execution caused by a vulnerability in BI Search, letting low privileged attackers with logon to the infrastructure take over the system, exploit requires attacker to have logon access.

  • 7.7 /10 High
    CVE-2026-83287 Auth required

    Oracle Business Intelligence Enterprise Edition - Broken Access Control

    Oracle Business Intelligence Enterprise Edition 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contains an information disclosure vulnerability caused by insufficient access control in Presentation Services, letting low privileged attackers with network access via SOAP gain unauthorized access to critical data, exploit requires low privileged network access.

  • 8.1 /10 High
    CVE-2026-83286 No auth

    Oracle Business Intelligence Enterprise Edition - Remote Code Execution

    Oracle Business Intelligence Enterprise Edition 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contain a remote code execution caused by platform security flaws, letting unauthenticated attackers with network HTTP access take over the system, exploit requires high attack complexity.

  • 8.3 /10 High
    CVE-2026-83285 Auth required

    Oracle Business Intelligence Enterprise Edition - Broken Access Control

    Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 contains an access control vulnerability in BI Search, letting low privileged attackers with network access via HTTP create, modify, delete data, or cause partial denial of service.

  • 8.6 /10 High
    CVE-2026-83284 No auth

    Oracle BI Publisher - Broken Access Control

    Oracle BI Publisher 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0 contain a broken access control vulnerability caused by improper authorization in BI Platform Security, letting unauthenticated network attackers cause denial of service and unauthorized data access via SOAP.

  • 9.8 /10 Critical
    CVE-2026-83283 No auth

    Oracle Business Intelligence Enterprise Edition - Authentication Bypass

    Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 contains a remote unauthenticated takeover vulnerability in Platform Security, letting attackers with network HTTP access fully compromise the system, exploit requires network access via HTTP.

  • 9.9 /10 Critical
    CVE-2026-83282 Auth required

    Oracle Business Intelligence Enterprise Edition - Remote Code Execution

    Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 contains a remote code execution caused by platform security flaws, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileges.

  • 7.5 /10 High
    CVE-2026-83281 No auth

    Oracle Fusion Middleware Helidon - Denial of Service

    Oracle Fusion Middleware Helidon 4.0.0-4.5.4 contains a denial of service caused by an easily exploitable flaw in helidon-webserver, letting unauthenticated attackers with network access cause a hang or crash, exploit requires network TCP access.

  • 7.5 /10 High
    CVE-2026-83280 No auth

    Oracle Fusion Middleware Helidon - Denial of Service

    Oracle Fusion Middleware Helidon 4.0.0-4.5.4 contains a denial of service caused by improper handling in helidon-webserver-http2, letting unauthenticated attackers with network access via HTTP/2 cause service hang or crash, exploit requires network access.

  • 7.3 /10 High
    CVE-2026-83277 Auth required

    Oracle Agile PLM MCAD Connector - Broken Access Control

    Oracle Agile PLM MCAD Connector 3.6 contains a broken access control vulnerability caused by insufficient privilege checks in CAX Client, letting low privileged logged-in attackers modify and read critical data, exploit requires attacker login.

  • 7.5 /10 High
    CVE-2026-83276 No auth

    Oracle Fusion Middleware Helidon - Denial of Service

    Oracle Fusion Middleware Helidon 4.0.0-4.5.4 contains a denial of service caused by improper handling in helidon-webclient-http2, letting unauthenticated attackers with network access via HTTP/2 cause service hang or crash, exploit requires network access.

  • 7.2 /10 High
    CVE-2026-83273 Auth required

    Oracle Business Intelligence Enterprise Edition - Remote Code Execution

    Oracle Business Intelligence Enterprise Edition 26.01.0.0.0 contains a remote code execution vulnerability caused by platform security flaws, letting high privileged attackers with network access via HTTP take over the system, exploit requires high privileges.

  • 8.5 /10 High
    CVE-2026-83272 Auth required

    Oracle Database Server Oracle Text - Privilege Escalation

    Oracle Database Server Oracle Text component 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3 contains a privilege escalation caused by improper handling in Oracle Text, letting low privileged attackers with Create Index privilege and network access via Oracle Net take over Oracle Text, exploit requires Create Index privilege.