Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 529 of 681

  • 8.1 /10 High
    CVE-2026-83192 No auth

    Oracle Siebel CRM End User - Remote Code Execution

    Oracle Siebel CRM End User 17.0-26.7 contains a remote takeover vulnerability caused by an unspecified issue in Open UI, letting unauthenticated attackers with network access via HTTP fully compromise the system, exploit requires high attack complexity.

  • 8.1 /10 High
    CVE-2026-83191 No auth

    Oracle Siebel CRM Deployment - Remote Code Execution

    Oracle Siebel CRM Deployment 17.0-26.7 contains a remote code execution vulnerability caused by a flaw in Server Infrastructure, letting unauthenticated network attackers take over the system, exploit requires high attack complexity.

  • 7.3 /10 High
    CVE-2026-83190 Auth required

    Oracle Siebel CRM Deployment - Authentication Bypass

    Oracle Siebel CRM Deployment 17.0-26.7 contains a takeover vulnerability caused by an easily exploitable issue in Server Infrastructure, letting low privileged attackers with logon and user interaction fully compromise the system.

  • 8.8 /10 High
    CVE-2026-83189 Auth required

    Oracle Oracle User Management - Privilege Escalation

    Oracle E-Business Suite Oracle User Management 12.2.3-12.2.15 contains a privilege escalation caused by flaws in Proxy User Delegation, letting low privileged attackers with network access via HTTP takeover the system, exploit requires low privilege network access.

  • 7.2 /10 High
    CVE-2026-83188 Auth required

    Oracle Oracle Depot Repair - Remote Code Execution

    Oracle E-Business Suite Oracle Depot Repair 12.2.3-12.2.15 contains a remote code execution caused by an easily exploitable vulnerability in Internal Operations, letting high privileged attackers with network access via HTTP take over the system, exploit requires high privileges.

  • 7.1 /10 High
    CVE-2026-83187 Auth required

    Oracle Oracle Common Applications Calendar - Broken Access Control

    Oracle E-Business Suite Oracle Common Applications Calendar 12.2.3-12.2.15 contains a broken access control vulnerability caused by improper authorization checks, letting low privileged attackers with network access via HTTP create, delete, modify, or read critical data, exploit requires low privilege network access.

  • 7.1 /10 High
    CVE-2026-83186 Auth required

    Oracle Oracle Common Applications Calendar - Broken Access Control

    Oracle E-Business Suite Oracle Common Applications Calendar 12.2.3-12.2.15 contains a broken access control vulnerability caused by insufficient privilege checks, letting low privileged attackers with network access via HTTP modify critical data and cause partial denial of service.

  • 7.3 /10 High
    CVE-2026-83185 Auth required

    Oracle E-Business Suite Oracle Common Applications - Broken Access Control

    Oracle E-Business Suite Oracle Common Applications 12.2.3-12.2.15 contains a broken access control vulnerability caused by improper authorization in CRM User Management Framework, letting low privileged attackers with network access via HTTP create, delete, or modify critical data, exploit requires user interaction from a different person.

  • 7.4 /10 High
    CVE-2026-83184 No auth

    Oracle Application Object Library - Broken Access Control

    Oracle Application Object Library 12.2.3-12.2.15 contains a broken access control vulnerability caused by insufficient authorization checks, letting unauthenticated attackers with network access via HTTP modify or access critical data, exploit requires network access.

  • 7.5 /10 High
    CVE-2026-83183 No auth

    Oracle Siebel CRM Deployment - Denial of Service

    Oracle Siebel CRM Deployment 17.0-26.7 contains a denial of service caused by unauthenticated network access via HTTP, letting remote attackers cause a hang or crash, exploit requires network access.

  • 7.5 /10 High
    CVE-2026-83182 Auth required

    Oracle Siebel CRM Development - SQL Injection

    Oracle Siebel CRM Development 17.0-26.7 contains a SQL injection caused by improper input handling in Configuration Tools, letting low privileged attackers with network access compromise the system, exploit requires network access and low privileges.

  • 8.2 /10 High
    CVE-2026-83181 No auth

    Oracle Siebel CRM Development - Broken Access Control

    Oracle Siebel CRM Development 17.0-26.7 contains an unauthorized access vulnerability caused by improper access control in Workspaces, letting unauthenticated network attackers access critical data and cause partial denial of service, exploit requires network access via HTTP.

  • 8.8 /10 High
    CVE-2026-83180 Auth required

    Oracle Siebel CRM Deployment - Remote Code Execution

    Oracle Siebel CRM Deployment 17.0-26.7 contains a remote code execution caused by an easily exploitable vulnerability in Server Infrastructure, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileges.

  • 7.1 /10 High
    CVE-2026-83179 Auth required

    Oracle Oracle Common Applications Calendar - Broken Access Control

    Oracle E-Business Suite Oracle Common Applications Calendar 12.2.3-12.2.15 contains a broken access control vulnerability caused by improper authorization checks, letting low privileged attackers with network access via HTTP create, modify, delete data, or cause partial denial of service.

  • 8.0 /10 High
    CVE-2026-83178 Auth required

    Oracle Application Object Library - Authentication Bypass

    Oracle Application Object Library 12.2.3-12.2.15 contains a vulnerability caused by an unspecified issue in the core component, letting high privileged attackers with network access via HTTP take over the application, exploit requires high privileges.