Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 532 of 681

  • 7.7 /10 High
    CVE-2026-83146 Auth required

    Oracle Siebel CRM End User - Broken Access Control

    Oracle Siebel CRM End User 17.0-26.7 contains a broken access control vulnerability caused by insufficient authorization in Open UI, letting low privileged attackers with network access via HTTP and user interaction modify or access critical data, exploit requires user interaction from a different person.

  • 8.7 /10 High
    CVE-2026-83145 Auth required

    Oracle Siebel CRM Siebel Apps - Customer Order Management - Broken Access Control

    Oracle Siebel CRM Siebel Apps - Customer Order Management 17.0-26.7 contains a broken access control vulnerability caused by improper authorization in Order Management, letting low privileged attackers with network access via HTTP and user interaction create, delete, or modify critical data, exploit requires user interaction from a different person.

  • 8.7 /10 High
    CVE-2026-83144 Auth required

    Oracle Siebel CRM Siebel Apps - Customer Order Management - Broken Access Control

    Oracle Siebel CRM Siebel Apps - Customer Order Management 17.0-26.7 contains a broken access control vulnerability caused by improper authorization in Order Management, letting low privileged attackers with network access via HTTP and user interaction create, delete, or modify critical data, exploit requires user interaction from a different person.

  • 8.1 /10 High
    CVE-2026-83143 No auth

    Oracle Siebel CRM Siebel Apps - Life Sciences - Broken Access Control

    Oracle Siebel CRM Siebel Apps - Life Sciences 17.0-26.7 contains a broken access control vulnerability caused by improper authorization in eDetailing component, letting unauthenticated attackers with network access via HTTP and user interaction create, delete, or modify critical data.

  • 7.7 /10 High
    CVE-2026-83142 Auth required

    Oracle Oracle Proposals - Broken Access Control

    Oracle E-Business Suite Oracle Proposals 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by insufficient access control in Internal Operations, letting low privileged attackers with network access via HTTP access critical data, exploit requires low privilege network access.

  • 7.7 /10 High
    CVE-2026-83141 Auth required

    Oracle Oracle Field Service - Broken Access Control

    Oracle E-Business Suite Oracle Field Service 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by insufficient access control in Internal Operations, letting low privileged attackers with network access via HTTP access critical data, exploit requires low privileged network access.

  • 8.0 /10 High
    CVE-2026-83138 Auth required

    Oracle Spares Management - Authentication Bypass

    Oracle Spares Management 12.2.3-12.2.15 contains a takeover vulnerability caused by an unspecified internal operations issue, letting high privileged attackers with network access via HTTP compromise the system, exploit requires high privileges.

  • 8.8 /10 High
    CVE-2026-83137 Auth required

    Oracle Oracle Spares Management - Remote Code Execution

    Oracle E-Business Suite Oracle Spares Management 12.2.3-12.2.15 contains a remote code execution caused by an easily exploitable vulnerability in Internal Operations, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileges.

  • 8.8 /10 High
    CVE-2026-83136 Auth required

    Oracle Oracle Spares Management - Authentication Bypass

    Oracle E-Business Suite Oracle Spares Management 12.2.3-12.2.15 contains a remote takeover vulnerability caused by an easily exploitable flaw in Internal Operations, letting low privileged attackers with network access via HTTP fully compromise the system, exploit requires low privilege network access.

  • 8.7 /10 High
    CVE-2026-83135 Auth required

    Oracle iStore - Broken Access Control

    Oracle iStore 12.2.3-12.2.15 contains a broken access control vulnerability in Shopping Cart, letting low privileged attackers with network access via HTTP and user interaction create, delete, or modify critical data, exploit requires user interaction from a different person.

  • 7.7 /10 High
    CVE-2026-83134 Auth required

    Oracle iStore - Broken Access Control

    Oracle iStore 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by insufficient access control in Shopping Cart component, letting low privileged network attackers access critical data, exploit requires network access via HTTP.

  • 7.5 /10 High
    CVE-2026-83133 No auth

    Oracle iStore - Broken Access Control

    Oracle iStore 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by insufficient access controls in the Shopping Cart component, letting unauthenticated attackers access critical data via HTTP, exploit requires network access.

  • 8.1 /10 High
    CVE-2026-83132 Auth required

    Oracle iStore - Broken Access Control

    Oracle iStore 12.2.3-12.2.15 contains a broken access control vulnerability in Shopping Cart, letting low privileged attackers with network access via HTTP create, delete, or modify critical data, exploit requires low privilege network access.

  • 7.7 /10 High
    CVE-2026-83131 Auth required

    Oracle Web Applications Desktop Integrator - Broken Access Control

    Oracle Web Applications Desktop Integrator 12.2.3-12.2.15 contains an unauthorized data access vulnerability caused by insecure file download handling, letting low privileged attackers with network access via HTTPS access critical data, exploit requires low privileges.

  • 7.1 /10 High
    CVE-2026-83130 Auth required

    Oracle Site Hub - Broken Access Control

    Oracle Site Hub 12.2.3-12.2.15 contains a broken access control vulnerability caused by insufficient authorization checks in Internal Operations, letting low privileged attackers with network access via HTTP modify and read critical data, exploit requires low privileged network access.