Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 537 of 681

  • 7.5 /10 High
    CVE-2026-83065

    Oracle WebCenter Portal - Authentication Bypass

    Oracle WebCenter Portal 14.1.2.0.0 contains a takeover vulnerability caused by access to the physical communication segment in Runtime Tools, letting unauthenticated attackers compromise the system, exploit requires physical network access.

  • 9.1 /10 Critical
    CVE-2026-83064 Auth required

    Oracle WebCenter Portal - Authentication Bypass

    Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain a takeover vulnerability caused by an easily exploitable flaw in Runtime Tools, letting high privileged attackers with network access via HTTP fully compromise the portal, exploit requires high privileges.

  • 7.2 /10 High
    CVE-2026-83063 Auth required

    Oracle Internet Directory - Authentication Bypass

    Oracle Internet Directory 12.2.1.4.0 and 14.1.2.1.0 contains a remote compromise vulnerability caused by an easily exploitable issue in OID LDAP Server, letting high privileged attackers with network access takeover the system, exploit requires high privileges.

  • 9.8 /10 Critical
    CVE-2026-83062 No auth

    Oracle Internet Directory - Remote Code Execution

    Oracle Internet Directory 12.2.1.4.0 and 14.1.2.1.0 contains a remote code execution caused by unauthenticated network access via LDAP, letting attackers fully compromise Oracle Internet Directory, exploit requires network access via LDAP.

  • 9.8 /10 Critical
    CVE-2026-83061 No auth

    Oracle Internet Directory - Remote Code Execution

    Oracle Internet Directory 12.2.1.4.0 and 14.1.2.1.0 contains a remote takeover vulnerability caused by unauthenticated network access via LDAP, letting attackers fully compromise the system without authentication.

  • 9.8 /10 Critical
    CVE-2026-83060 No auth

    Oracle Internet Directory - Remote Code Execution

    Oracle Internet Directory 12.2.1.4.0 and 14.1.2.1.0 contains a remote code execution caused by unauthenticated network access via LDAP, letting attackers fully compromise Oracle Internet Directory, exploit requires network access via LDAP.

  • 10.0 /10 Critical
    CVE-2026-83059 No auth

    Oracle Internet Directory - Remote Code Execution

    Oracle Internet Directory 12.2.1.4.0 and 14.1.2.1.0 contain an unauthenticated remote code execution vulnerability in OID LDAP Server, letting unauthenticated attackers with network access fully compromise the system, exploit requires network LDAP access.

  • 9.9 /10 Critical
    CVE-2026-83058 Auth required

    Oracle Internet Directory - Privilege Escalation

    Oracle Internet Directory 12.2.1.4.0 and 14.1.2.1.0 contain a privilege escalation caused by a vulnerability in the OID LDAP Server, letting low privileged attackers with network LDAP access take over the directory, exploit requires low privileges.

  • 9.9 /10 Critical
    CVE-2026-83057 Auth required

    Oracle Internet Directory - Privilege Escalation

    Oracle Internet Directory 12.2.1.4.0 and 14.1.2.1.0 contain a privilege escalation caused by a vulnerability in the OID LDAP Server, letting low privileged attackers with network LDAP access take over the directory, exploit requires low privileges.

  • 9.9 /10 Critical
    CVE-2026-83056 Auth required

    Oracle Internet Directory - Privilege Escalation

    Oracle Internet Directory 12.2.1.4.0 and 14.1.2.1.0 contain a privilege escalation vulnerability in OID LDAP Server, letting low privileged attackers with network LDAP access takeover Oracle Internet Directory, exploit requires low privilege network access.

  • 9.9 /10 Critical
    CVE-2026-83055 Auth required

    Oracle Internet Directory - Privilege Escalation

    Oracle Internet Directory 12.2.1.4.0 and 14.1.2.1.0 contain a privilege escalation caused by a vulnerability in the OID LDAP Server, letting low privileged attackers with network LDAP access takeover Oracle Internet Directory, exploit requires low privileged network access.

  • 9.8 /10 Critical
    CVE-2026-83054 No auth

    Oracle Internet Directory - Authentication Bypass

    Oracle Internet Directory 12.2.1.4.0 and 14.1.2.1.0 contains a remote unauthenticated takeover vulnerability in OID LDAP Server, letting attackers with network access fully compromise the system, exploit requires network access via LDAP.

  • 8.8 /10 High
    CVE-2026-83053 Auth required

    Oracle WebCenter Portal - Remote Code Execution

    Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution caused by a vulnerability in Runtime Tools, letting low privileged attackers with network access via HTTP fully compromise the system, exploit requires network access with low privileges.

  • 7.6 /10 High
    CVE-2026-83052 Auth required

    Oracle WebCenter Portal - Broken Access Control

    Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contains an unauthorized data access and modification vulnerability caused by insufficient access controls in Runtime Tools, letting high privileged attackers with network HTTP access compromise data, exploit requires high privileges.

  • 7.5 /10 High
    CVE-2026-83051 No auth

    Oracle WebCenter Portal - Broken Access Control

    Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contains an unauthorized access vulnerability caused by insufficient access controls in Runtime Tools, letting unauthenticated attackers with network access via HTTP access critical data, exploit requires network access.