Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 533 of 681

  • 7.7 /10 High
    CVE-2026-83129 Auth required

    Oracle Oracle Sales - Broken Access Control

    Oracle E-Business Suite Oracle Sales 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by insufficient access control in Internal Operations, letting low privileged attackers with network access via HTTP access critical data, exploit requires low privilege network access.

  • 7.5 /10 High
    CVE-2026-83128 No auth

    Oracle Sales Offline - Broken Access Control

    Oracle Sales Offline 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by insufficient access controls in Internal Operations, letting unauthenticated attackers with network access via HTTP access critical data, exploit requires network access.

  • 7.7 /10 High
    CVE-2026-83127 Auth required

    Oracle Sales Offline - Broken Access Control

    Oracle Sales Offline 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by insufficient access control in Internal Operations, letting low privileged attackers with network access via HTTP access critical data, exploit requires low privileges and network access.

  • 7.6 /10 High
    CVE-2026-83126 Auth required

    Oracle Oracle Sales Online - Broken Access Control

    Oracle E-Business Suite Oracle Sales Online 12.2.3-12.2.15 contains a broken access control vulnerability caused by improper authorization in Internal Operations, letting low privileged attackers with network access via HTTP and user interaction gain unauthorized access and modify critical data, exploit requires user interaction from a different person.

  • 8.8 /10 High
    CVE-2026-83125 Auth required

    Oracle Oracle Report Manager - Remote Code Execution

    Oracle E-Business Suite Oracle Report Manager 12.2.3-12.2.15 contains a remote code execution caused by an easily exploitable vulnerability in Internal Operations, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileges.

  • 8.8 /10 High
    CVE-2026-83124 Auth required

    Oracle E-Business Suite Oracle Sales Online - Remote Code Execution

    Oracle E-Business Suite Oracle Sales Online 12.2.3-12.2.15 contains a remote code execution caused by an easily exploitable vulnerability in Internal Operations, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileges and network access.

  • 7.1 /10 High
    CVE-2026-83123 Auth required

    Oracle Oracle Report Manager - Broken Access Control

    Oracle E-Business Suite Oracle Report Manager 12.2.3-12.2.15 contains an unauthorized access and partial denial of service vulnerability caused by internal operations component flaws, letting low privileged attackers with network access via HTTPS compromise critical data and cause partial DoS, exploit requires low privileged network access.

  • 8.8 /10 High
    CVE-2026-83122 Auth required

    Oracle Oracle Report Manager - Remote Code Execution

    Oracle E-Business Suite Oracle Report Manager 12.2.3-12.2.15 contains a remote code execution caused by an easily exploitable vulnerability in Internal Operations, letting low privileged attackers with network access via HTTPS take over the system, exploit requires low privileges.

  • 8.8 /10 High
    CVE-2026-83121 Auth required

    Oracle E-Business Suite Oracle Marketing - Remote Code Execution

    Oracle E-Business Suite Oracle Marketing 12.2.3-12.2.15 contains a remote code execution caused by an easily exploitable vulnerability in Audience component, letting low privileged attackers with network access via HTTP take over Oracle Marketing, exploit requires low privileges.

  • 8.8 /10 High
    CVE-2026-83120 Auth required

    Oracle Oracle Alert - Remote Code Execution

    Oracle E-Business Suite Oracle Alert 12.2.3-12.2.15 contains a remote code execution caused by internal operations vulnerability, letting low privileged attackers with network access via HTTP take over Oracle Alert, exploit requires low privilege network access.

  • 8.8 /10 High
    CVE-2026-83119 Auth required

    Oracle Oracle User Management - Authentication Bypass

    Oracle E-Business Suite Oracle User Management 12.2.6-12.2.15 contains a remote takeover vulnerability caused by an easily exploitable flaw in internal operations, letting low privileged attackers with network access via HTTP fully compromise the system, exploit requires low privileges.

  • 7.8 /10 High
    CVE-2026-83118 Auth required

    Oracle E-Business Suite Applications DBA - Privilege Escalation

    Oracle E-Business Suite Applications DBA 12.2.3-12.2.15 contains a privilege escalation vulnerability caused by insufficient access control in AD Utilities, letting low privileged attackers with logon compromise Applications DBA, exploit requires attacker logon to infrastructure.

  • 7.2 /10 High
    CVE-2026-83117 Auth required

    Oracle E-Business Suite Applications DBA - Remote Code Execution

    Oracle E-Business Suite Applications DBA 12.2.3-12.2.15 contains a remote code execution caused by improper access control in AD Utilities, letting high privileged attackers with network access via HTTP take over Applications DBA, exploit requires high privileges.

  • 7.7 /10 High
    CVE-2026-83116 Auth required

    Oracle Order Management - Broken Access Control

    Oracle Order Management 12.2.5-12.2.15 contains an information disclosure vulnerability caused by insufficient access control in Product Diagnostic Tools, letting low privileged attackers with network access via HTTP gain unauthorized access to critical data, exploit requires low privileged network access.

  • 7.5 /10 High
    CVE-2026-83115 No auth

    Oracle Applications Manager - Broken Access Control

    Oracle E-Business Suite Oracle Applications Manager 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by improper access control in Command Line - RapidClone, letting unauthenticated attackers with network access via HTTP access critical data, exploit requires network access via HTTP.