Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 526 of 681

  • 7.0 /10 High
    CVE-2026-83239 Auth required

    Oracle Commerce Guided Search / Oracle Commerce Experience Manager - Authentication Bypass

    Oracle Commerce Guided Search / Oracle Commerce Experience Manager 11.4.0 contains a vulnerability in Endeca Application Controller, letting low privileged attackers with logon compromise the product, exploit requires infrastructure logon.

  • 7.1 /10 High
    CVE-2026-83238 Auth required

    Oracle Commerce Guided Search / Oracle Commerce Experience Manager - Broken Access Control

    Oracle Commerce Guided Search / Oracle Commerce Experience Manager 11.4.0 contains an unauthorized access and partial denial of service vulnerability caused by insufficient access controls in Forge component, letting low privileged attackers with network access via HTTP access critical data and cause partial service disruption.

  • 7.1 /10 High
    CVE-2026-83237 Auth required

    Oracle Commerce Guided Search / Oracle Commerce Experience Manager - Broken Access Control

    Oracle Commerce Guided Search / Oracle Commerce Experience Manager 11.4.0 contains an unauthorized access and partial denial of service vulnerability caused by improper access control in Forge component, letting low privileged attackers with network access via HTTP compromise critical data and cause partial DoS, exploit requires low privileged network access.

  • 8.2 /10 High
    CVE-2026-83236 No auth

    Oracle Commerce Guided Search / Oracle Commerce Experience Manager - Broken Access Control

    Oracle Commerce Guided Search / Oracle Commerce Experience Manager 11.4.0 contains a broken access control vulnerability caused by unauthenticated network access via HTTP, letting attackers gain unauthorized access and modify accessible data, exploit requires user interaction from a third party.

  • 7.5 /10 High
    CVE-2026-83235 No auth

    Oracle Commerce Guided Search / Oracle Commerce Experience Manager - Broken Access Control

    Oracle Commerce Guided Search / Oracle Commerce Experience Manager 11.4.0 contains an unauthorized access vulnerability caused by improper access control, letting unauthenticated attackers with network access via HTTP access critical data, exploit requires network access.

  • 8.2 /10 High
    CVE-2026-83234 No auth

    Oracle Commerce Guided Search / Oracle Commerce Experience Manager - Broken Access Control

    Oracle Commerce Guided Search / Oracle Commerce Experience Manager 11.4.0 contains an unauthorized access vulnerability caused by improper access control, letting unauthenticated attackers with network access via HTTP access and modify critical data, exploit requires network access.

  • 7.7 /10 High
    CVE-2026-83233 Auth required

    Oracle Commerce Guided Search / Oracle Commerce Experience Manager - Broken Access Control

    Oracle Commerce Guided Search / Oracle Commerce Experience Manager 11.4.0 contains an information disclosure vulnerability caused by improper access control, letting low privileged attackers with network access via HTTP gain unauthorized access to critical data, exploit requires low privileged network access.

  • 9.8 /10 Critical
    CVE-2026-83232 No auth

    Oracle Data Integrator - Remote Code Execution

    Oracle Data Integrator 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution vulnerability in Console / Repository Explorer, letting unauthenticated attackers with network access via HTTP fully compromise the system, exploit requires network access.

  • 7.0 /10 High
    CVE-2026-83231 No auth

    Oracle Fusion Middleware Helidon - Undefined

    Oracle Fusion Middleware Helidon 3.0.0-3.2.20 and 4.0.0-4.5.4 contains an undefined vulnerability in helidon-dbclient-mongodb, letting unauthenticated network attackers access and partially disrupt data, exploit requires network access via HTTP with high complexity.

  • 7.1 /10 High
    CVE-2026-83230 Auth required

    Oracle Siebel CRM - Broken Access Control

    Oracle Siebel CRM 17.0-26.7 contains an unauthorized access vulnerability caused by insufficient access control in Siebel Management Console, letting low privileged attackers with network access via HTTP access and modify critical data.

  • 9.1 /10 Critical
    CVE-2026-83229 Auth required

    Oracle Siebel CRM - Remote Code Execution

    Oracle Siebel CRM 17.0-26.7 contains a remote code execution caused by a vulnerability in Siebel Management Console, letting high privileged attackers with network access via HTTP take over Siebel CRM Deployment, exploit requires high privileges.

  • 7.5 /10 High
    CVE-2026-83228 No auth

    Oracle Siebel CRM Deployment - Denial of Service

    Oracle Siebel CRM Deployment 17.0-26.7 contains a denial of service caused by unauthenticated network access via TCP, letting remote attackers cause a hang or crash, exploit requires network access.

  • 7.5 /10 High
    CVE-2026-83227 Auth required

    Oracle Siebel CRM Integration - Remote Code Execution

    Oracle Siebel CRM Integration 17.0-26.7 contains a remote code execution caused by vulnerability in EAI component, letting low privileged attackers with network access via HTTP take over the system, exploit requires high attack complexity.

  • 7.5 /10 High
    CVE-2026-83226 Auth required

    Oracle Siebel CRM Deployment - Authentication Bypass

    Oracle Siebel CRM Deployment 17.0-26.7 contains a vulnerability in Server Infrastructure, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileges and network access.

  • 7.5 /10 High
    CVE-2026-83225 No auth

    Oracle Siebel CRM Deployment - Denial of Service

    Oracle Siebel CRM Deployment 17.0-26.7 contains a denial of service caused by unauthenticated network access via TCP, letting attackers cause a hang or crash, exploit requires network access.