Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 535 of 681

  • 9.8 /10 Critical
    CVE-2026-83098 No auth

    Oracle Fusion Middleware Oracle Forms - Remote Code Execution

    Oracle Fusion Middleware Oracle Forms 12.2.1.19.0 and 14.1.2.0.0 contain a remote code execution caused by unauthenticated network access via HTTP, letting attackers fully compromise Oracle Forms, exploit requires network access via HTTP.

  • 7.9 /10 High
    CVE-2026-83096 Auth required

    Oracle Oracle Forms - Authorization Bypass & Partial Denial of Service

    Oracle Fusion Middleware Oracle Forms 12.2.1.19.0 and 14.1.2.0.0 contains a vulnerability in Forms Services, C/S, Charmode, letting low privileged attackers with network access via HTTP and user interaction cause unauthorized data access, modification, and partial denial of service.

  • 9.8 /10 Critical
    CVE-2026-83095 No auth

    Oracle Fusion Middleware Oracle Forms - Remote Code Execution

    Oracle Fusion Middleware Oracle Forms 12.2.1.19.0 and 14.1.2.0.0 contain a remote code execution caused by unauthenticated network access via HTTP, letting attackers fully compromise Oracle Forms, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-83094 No auth

    Oracle Oracle Forms - Remote Code Execution

    Oracle Fusion Middleware Oracle Forms 12.2.1.19.0 and 14.1.2.0.0 contain a remote code execution caused by unauthenticated network access via HTTP, letting attackers fully compromise Oracle Forms, exploit requires network access via HTTP.

  • 8.6 /10 High
    CVE-2026-83093 No auth

    Oracle Oracle Forms - Information Disclosure

    Oracle Fusion Middleware Oracle Forms 12.2.1.19.0 and 14.1.2.0.0 contain an information disclosure vulnerability caused by unauthenticated network access via HTTP, letting attackers gain unauthorized access to critical or all accessible Oracle Forms data, exploit requires network access.

  • 7.1 /10 High
    CVE-2026-83092 Auth required

    Oracle E-Business Suite Oracle Field Service - Broken Access Control

    Oracle E-Business Suite Oracle Field Service 12.2.3-12.2.15 contains a broken access control vulnerability in Internal Operations, letting low privileged attackers with network HTTP access create, modify, delete data, or cause partial denial of service.

  • 7.6 /10 High
    CVE-2026-83091 Auth required

    Oracle Oracle Field Service - Broken Access Control

    Oracle E-Business Suite Oracle Field Service 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by insufficient access controls in Internal Operations, letting low privileged attackers with network access via HTTP access and modify critical data and cause partial denial of service.

  • 8.8 /10 High
    CVE-2026-83090 Auth required

    Oracle Oracle Spares Management - Remote Code Execution

    Oracle E-Business Suite Oracle Spares Management 12.2.3-12.2.15 contains a remote code execution caused by an easily exploitable vulnerability in Internal Operations, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileged network access.

  • 8.1 /10 High
    CVE-2026-83089 Auth required

    Oracle Oracle Alert - Broken Access Control

    Oracle E-Business Suite Oracle Alert 12.2.3-12.2.15 contains a broken access control vulnerability in Internal Operations, letting low privileged attackers with network access via HTTP create, delete, or modify critical data, exploit requires low privilege network access.

  • 7.7 /10 High
    CVE-2026-83088 Auth required

    Oracle Database Server - Denial of Service

    Oracle Database Server 23.4.0-23.26.3 contains a denial of service caused by a vulnerability in the RDBMS component, letting low privileged authenticated users with network access via Oracle Net cause a hang or crash, exploit requires authenticated user privilege.

  • 8.2 /10 High
    CVE-2026-83087 Auth required

    Oracle Siebel CRM - Broken Access Control

    Oracle Siebel CRM Cloud Applications 22.3-26.7 contains a broken access control vulnerability in Siebel Cloud Manager, letting low privileged attackers with network access via HTTP create, delete, or modify critical data, exploit requires network access with low privileges.

  • 8.8 /10 High
    CVE-2026-83086 Auth required

    Oracle Siebel CRM - Remote Code Execution

    Oracle Siebel CRM Cloud Applications 22.3-26.7 contains a remote code execution caused by an easily exploitable vulnerability in Siebel Cloud Manager, letting low privileged attackers with network access takeover the application, exploit requires network access via HTTP.

  • 8.2 /10 High
    CVE-2026-83085

    Oracle Siebel CRM - Broken Access Control

    Oracle Siebel CRM Cloud Applications 22.3-26.7 contains an unauthorized access vulnerability caused by insufficient protection of the physical communication segment in Siebel Cloud Manager, letting low privileged attackers with physical network access compromise data confidentiality, integrity, and availability.

  • 7.7 /10 High
    CVE-2026-83084 Auth required

    Oracle Oracle Marketing - Broken Access Control

    Oracle E-Business Suite Oracle Marketing 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by insufficient access control in Audience component, letting low privileged attackers with network access via HTTP access critical data, exploit requires low privilege network access.

  • 8.5 /10 High
    CVE-2026-83083 Auth required

    Oracle Marketing - Broken Access Control

    Oracle Marketing in Oracle E-Business Suite 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by insufficient access controls in Audience component, letting low privileged attackers with network access via HTTP compromise data confidentiality and integrity, exploit requires low privileged network access.