Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 528 of 681

  • 8.8 /10 High
    CVE-2026-83209 Auth required

    Oracle Siebel CRM Development - Remote Code Execution

    Oracle Siebel CRM Development 17.0-26.7 contains a remote code execution caused by vulnerability in Workflow component, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileges.

  • 8.8 /10 High
    CVE-2026-83208 Auth required

    Oracle Siebel CRM Deployment - SQL Injection

    Oracle Siebel CRM Deployment 17.0-26.7 contains a SQL injection caused by improper input validation in Migration component, letting low privileged attackers with network access take over the system, exploit requires low privilege network access.

  • 7.6 /10 High
    CVE-2026-83207 Auth required

    Oracle Siebel CRM - Broken Access Control

    Oracle Siebel CRM 17.0-26.7 contains a broken access control vulnerability caused by improper authorization in Integration - Scripting, letting low privileged attackers with network access via HTTP cause denial of service and unauthorized data read/write.

  • 7.1 /10 High
    CVE-2026-83206 Auth required

    Oracle Banking Corporate Lending Process Management - Authentication Bypass

    Oracle Banking Corporate Lending Process Management 14.5.0.0.0-14.9.0.0.0 contains an authentication bypass caused by a vulnerability in the Base component, letting low privileged attackers with network access via HTTP and user interaction takeover the system.

  • 8.8 /10 High
    CVE-2026-83205 Auth required

    Oracle Applications Framework - Remote Code Execution

    Oracle Applications Framework 12.2.3-12.2.15 contains a remote code execution caused by a vulnerability in the Personalization component, letting low privileged attackers with network access via HTTP take over the framework, exploit requires low privileges.

  • 7.5 /10 High
    CVE-2026-83204 Auth required

    Oracle Oracle Sourcing - Authentication Bypass

    Oracle E-Business Suite Oracle Sourcing 12.2.3-12.2.15 contains a takeover vulnerability caused by an internal operations issue, letting low privileged attackers with network access via HTTP fully compromise Oracle Sourcing, exploit requires low privileges and network access.

  • 8.6 /10 High
    CVE-2026-83203 No auth

    Oracle Siebel CRM End User - Broken Access Control

    Oracle Siebel CRM End User 17.0-26.7 contains an unauthenticated access vulnerability in Open UI, letting remote attackers compromise data confidentiality, integrity, and availability, exploit requires network access via HTTP.

  • 9.1 /10 Critical
    CVE-2026-83202 No auth

    Oracle Siebel CRM Deployment - Broken Access Control

    Oracle Siebel CRM Deployment 17.0-26.7 contains an unauthorized access vulnerability in Server Infrastructure, letting unauthenticated network attackers via HTTP create, delete, or modify critical data, exploit requires network access.

  • 9.1 /10 Critical
    CVE-2026-83201 No auth

    Oracle Siebel CRM Deployment - Broken Access Control

    Oracle Siebel CRM Deployment 17.0-26.7 contains an unauthenticated access control vulnerability in Server Infrastructure, letting remote attackers create, delete, or modify critical data, exploit requires network access via HTTP.

  • 8.8 /10 High
    CVE-2026-83199 Auth required

    Oracle Siebel CRM Deployment - Remote Code Execution

    Oracle Siebel CRM Deployment 17.0-26.7 contains a remote code execution caused by a vulnerability in Server Infrastructure, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privilege network access.

  • 9.1 /10 Critical
    CVE-2026-83197 No auth

    Oracle Siebel CRM Siebel Apps - Financial Services - Authentication Bypass

    Oracle Siebel CRM Siebel Apps - Financial Services 17.0-26.7 contains an unauthenticated network accessible vulnerability in Financial Accounts, letting attackers gain unauthorized data access or cause denial of service, exploit requires network access via HTTP.

  • 9.1 /10 Critical
    CVE-2026-83196 Auth required

    Oracle Siebel CRM - Remote Code Execution

    Oracle Siebel CRM 17.0-26.7 contains a remote code execution caused by a vulnerability in Server Infrastructure, letting high privileged attackers with network access via HTTP take over Siebel CRM Deployment, exploit requires high privileges.

  • 7.2 /10 High
    CVE-2026-83195 Auth required

    Oracle Siebel CRM Deployment - Remote Code Execution

    Oracle Siebel CRM Deployment 17.0-26.7 contains a remote code execution caused by a vulnerability in Server Infrastructure, letting high privileged attackers with network access via TCP take over the system, exploit requires high privileges.

  • 8.8 /10 High
    CVE-2026-83194 Auth required

    Oracle Depot Repair - Remote Code Execution

    Oracle E-Business Suite Oracle Depot Repair 12.2.10-12.2.15 contains a remote code execution caused by an easily exploitable vulnerability in Internal Operations, letting low privileged attackers with network access via HTTP take over the system, exploit requires network access.

  • 7.3 /10 High
    CVE-2026-83193 Auth required

    Oracle Siebel CRM Siebel Apps - Life Sciences - Privilege Escalation

    Oracle Siebel CRM Siebel Apps - Life Sciences 17.0-26.7 contains a privilege escalation vulnerability caused by insufficient protections in the Life Sciences component, letting low privileged attackers with logon and user interaction take over the application.