Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 527 of 681

  • 7.1 /10 High
    CVE-2026-83224 Auth required

    Oracle Siebel CRM Deployment - Broken Access Control

    Oracle Siebel CRM Deployment 17.0-26.7 contains an unauthorized access and partial denial of service vulnerability caused by insufficient access control in Server Infrastructure, letting low privileged attackers with network HTTP access compromise critical data and availability, exploit requires low privileges.

  • 7.5 /10 High
    CVE-2026-83223 Auth required

    Oracle Siebel CRM Deployment - Remote Code Execution

    Oracle Siebel CRM Deployment 17.0-26.7 contains a remote code execution caused by vulnerability in Siebel Remote component, letting low privileged attackers with network access via HTTP takeover the system, exploit requires low privileges and network access.

  • 7.5 /10 High
    CVE-2026-83222 No auth

    Oracle Siebel CRM Deployment - Denial of Service

    Oracle Siebel CRM Deployment 17.0-26.7 contains a denial of service caused by unauthenticated network access via multiple protocols, letting attackers cause a hang or crash, exploit requires network access.

  • 7.1 /10 High
    CVE-2026-83221 Auth required

    Oracle Siebel CRM Integration - Broken Access Control

    Oracle Siebel CRM Integration 17.0-26.7 contains a broken access control vulnerability caused by insufficient privilege checks in EAI component, letting low privileged attackers with network SOAP access gain unauthorized data access and modification.

  • 8.1 /10 High
    CVE-2026-83220

    Oracle Siebel CRM Integration - Broken Access Control

    Oracle Siebel CRM Integration 23.6-26.7 contains an unauthorized data access vulnerability caused by insufficient access control in Event Publish and Subscribe, letting unauthenticated attackers with physical network access modify or access critical data.

  • 7.1 /10 High
    CVE-2026-83219 Auth required

    Oracle Siebel CRM Deployment - Broken Access Control

    Oracle Siebel CRM Deployment 17.0-26.7 contains a broken access control vulnerability in Server Infrastructure, letting low privileged logged-in attackers create, delete, or modify critical data, exploit requires attacker login.

  • 7.4 /10 High
    CVE-2026-83218 No auth

    Oracle Siebel CRM Deployment - Broken Access Control

    Oracle Siebel CRM Deployment 17.0-26.7 contains a broken access control vulnerability in Server Infrastructure, letting unauthenticated attackers with network HTTP access modify or access critical data, exploit requires high attack complexity.

  • 7.1 /10 High
    CVE-2026-83217 Auth required

    Oracle Siebel CRM End User - Broken Access Control

    Oracle Siebel CRM End User 17.0-26.7 contains an unauthorized access vulnerability caused by insufficient access control in Open UI, letting low privileged attackers with network access via HTTP compromise data confidentiality and integrity, exploit requires low privilege network access.

  • 7.8 /10 High
    CVE-2026-83216 Auth required

    Oracle Siebel CRM Deployment - Privilege Escalation

    Oracle Siebel CRM Deployment 17.0-26.7 contains a privilege escalation vulnerability in Server Infrastructure, letting low privileged logged-in attackers take over Siebel CRM Deployment, exploit requires attacker login.

  • 8.2 /10 High
    CVE-2026-83215 No auth

    Oracle Siebel CRM Deployment - Broken Access Control

    Oracle Siebel CRM Deployment 17.0-26.7 contains an unauthorized access vulnerability caused by improper access control in Server Infrastructure, letting unauthenticated attackers with network HTTP access compromise data confidentiality and integrity.

  • 7.8 /10 High
    CVE-2026-83214 Auth required

    Oracle Siebel CRM Deployment - Remote Code Execution

    Oracle Siebel CRM Deployment 17.0-26.7 contains a remote code execution caused by insufficient privilege checks in Server Infrastructure, letting low privileged logged-in attackers take over the system, exploit requires attacker login.

  • 7.5 /10 High
    CVE-2026-83213 No auth

    Oracle Siebel CRM End User - Broken Access Control

    Oracle Siebel CRM End User 17.0-26.7 contains an unauthorized access vulnerability caused by improper access control in Reports component, letting unauthenticated attackers with network access via HTTP access critical data, exploit requires network access.

  • 8.8 /10 High
    CVE-2026-83212 Auth required

    Oracle Siebel Apps - Self Service - Remote Code Execution

    Oracle Siebel CRM Siebel Apps - Self Service 17.0-26.7 contains a remote code execution caused by an easily exploitable vulnerability in Helpdesk/Training component, letting low privileged attackers with network access takeover the application, exploit requires low privilege network access.

  • 7.8 /10 High
    CVE-2026-83211 Auth required

    Oracle Siebel CRM Deployment - Privilege Escalation

    Oracle Siebel CRM Deployment 17.0-26.7 contains a privilege escalation vulnerability in Server Infrastructure, letting low privileged logged-in attackers take over Siebel CRM Deployment, exploit requires attacker logon.

  • 8.8 /10 High
    CVE-2026-83210 Auth required

    Oracle Siebel CRM Deployment - SQL Injection

    Oracle Siebel CRM Deployment 17.0-26.7 contains a SQL injection caused by improper input validation in Server Infrastructure, letting low privileged attackers with network access take over the system, exploit requires low privilege network access.