Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 534 of 681

  • 7.5 /10 High
    CVE-2026-83114 Auth required

    Oracle Oracle Quality - Authentication Bypass

    Oracle E-Business Suite Oracle Quality 12.2.3-12.2.15 contains a takeover vulnerability caused by an internal operations issue, letting low privileged attackers with network access via HTTP fully compromise Oracle Quality, exploit requires low privileges and network access.

  • 7.1 /10 High
    CVE-2026-83113 Auth required

    Oracle E-Business Suite Oracle Quality - Broken Access Control

    Oracle E-Business Suite Oracle Quality 12.2.3-12.2.15 contains a broken access control caused by insufficient privilege checks in Internal Operations, letting low privileged attackers with network access via HTTP gain unauthorized access and modify critical data.

  • 7.2 /10 High
    CVE-2026-83112 Auth required

    Oracle Lease and Finance Management - Remote Code Execution

    Oracle Lease and Finance Management 12.2.7-12.2.15 contains a remote code execution caused by an easily exploitable vulnerability in Internal Operations, letting high privileged attackers with network access via HTTP take over the system, exploit requires high privileges.

  • 7.1 /10 High
    CVE-2026-83111 Auth required

    Oracle E-Business Suite Oracle Partner Management - Broken Access Control

    Oracle E-Business Suite Oracle Partner Management 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by internal operations flaws, letting low privileged attackers with network access via HTTP compromise data confidentiality and integrity, exploit requires network access with low privileges.

  • 7.5 /10 High
    CVE-2026-83110 No auth

    Oracle E-Business Suite Oracle Marketing - Broken Access Control

    Oracle E-Business Suite Oracle Marketing 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by insufficient access controls in Audience component, letting unauthenticated attackers with network access via HTTP access critical data, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-83108 No auth

    Oracle Oracle Forms - Remote Code Execution

    Oracle Fusion Middleware Oracle Forms 12.2.1.19.0 and 14.1.2.0.0 contain a remote code execution caused by unauthenticated network access via HTTP, letting attackers fully compromise Oracle Forms, exploit requires network access via HTTP.

  • 9.1 /10 Critical
    CVE-2026-83107 Auth required

    Oracle Oracle Forms - Remote Code Execution

    Oracle Fusion Middleware Oracle Forms 12.2.1.19.0 and 14.1.2.0.0 contain a remote code execution caused by an easily exploitable vulnerability in Forms Services, letting high privileged attackers with network access via HTTP take over Oracle Forms, exploit requires high privileges.

  • 7.5 /10 High
    CVE-2026-83106 Auth required

    Oracle Oracle Forms - Remote Code Execution

    Oracle Fusion Middleware Oracle Forms 12.2.1.19.0 and 14.1.2.0.0 contain a remote code execution caused by vulnerability in Forms Services, letting low privileged attackers with network access via HTTP take over Oracle Forms, exploit requires network access with low privileges.

  • 9.0 /10 Critical
    CVE-2026-83105 No auth

    Oracle Oracle Forms - Remote Code Execution

    Oracle Fusion Middleware Oracle Forms 12.2.1.19.0 and 14.1.2.0.0 contain a remote code execution caused by a vulnerability in Forms Services, letting unauthenticated attackers with network HTTP access take over Oracle Forms, exploit requires high attack complexity.

  • 9.1 /10 Critical
    CVE-2026-83104 No auth

    Oracle Fusion Middleware Oracle Forms - Broken Access Control

    Oracle Fusion Middleware Oracle Forms 12.2.1.19.0 and 14.1.2.0.0 contain a broken access control vulnerability in Forms Services, allowing unauthenticated network attackers to create, delete, or modify critical data, or access all Oracle Forms data.

  • 9.1 /10 Critical
    CVE-2026-83103 Auth required

    Oracle Oracle Forms - Remote Code Execution

    Oracle Fusion Middleware Oracle Forms 12.2.1.19.0 and 14.1.2.0.0 contain a remote code execution caused by a vulnerability in Forms Services, letting high privileged attackers with network access via HTTP take over Oracle Forms, exploit requires high privileges.

  • 7.4 /10 High
    CVE-2026-83102 No auth

    Oracle Oracle Forms - Broken Access Control

    Oracle Fusion Middleware Oracle Forms 12.2.1.19.0 and 14.1.2.0.0 contains a broken access control vulnerability in Forms Services, letting unauthenticated attackers with network HTTP access modify or access critical data, exploit requires network access via HTTP.

  • 8.1 /10 High
    CVE-2026-83101 No auth

    Oracle Oracle Forms - Remote Code Execution

    Oracle Fusion Middleware Oracle Forms 12.2.1.19.0 and 14.1.2.0.0 contain a remote code execution caused by vulnerability in Forms Services, letting unauthenticated attackers with network access via HTTP take over Oracle Forms, exploit requires high attack complexity.

  • 9.8 /10 Critical
    CVE-2026-83100 No auth

    Oracle Oracle Forms - Remote Code Execution

    Oracle Fusion Middleware Oracle Forms 12.2.1.19.0 and 14.1.2.0.0 contain a remote code execution caused by unauthenticated network access via HTTP, letting attackers fully compromise Oracle Forms, exploit requires network access via HTTP.

  • 10.0 /10 Critical
    CVE-2026-83099 No auth

    Oracle Oracle Forms - Remote Code Execution

    Oracle Fusion Middleware Oracle Forms 12.2.1.19.0 and 14.1.2.0.0 contain a remote code execution caused by an easily exploitable vulnerability in Forms Services, letting unauthenticated attackers with network access via HTTP take over Oracle Forms, exploit requires network access via HTTP.