Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 538 of 681

  • 7.1 /10 High
    CVE-2026-83050 Auth required

    Oracle WebCenter Portal - Broken Access Control

    Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain an unauthorized data access and modification vulnerability caused by insufficient access controls in Runtime Tools, letting low privileged attackers with network access via HTTP compromise critical data, exploit requires low privileged network access.

  • 8.5 /10 High
    CVE-2026-83049 Auth required

    Oracle WebCenter Portal - Broken Access Control

    Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contains an unauthorized access vulnerability in Security Framework, letting low privileged attackers with network HTTP access compromise data confidentiality and integrity, exploit requires low privileges.

  • 7.7 /10 High
    CVE-2026-83048 Auth required

    Oracle WebCenter Portal - Broken Access Control

    Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain an unauthorized access vulnerability caused by insufficient access control in Runtime Tools, letting low privileged attackers with network access via HTTP access critical data, exploit requires low privilege network access.

  • 8.2 /10 High
    CVE-2026-83047 No auth

    Oracle WebCenter Portal - Broken Access Control

    Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contains an unauthorized access vulnerability caused by improper access control in Runtime Tools, letting unauthenticated network attackers access and modify critical data via HTTP.

  • 7.1 /10 High
    CVE-2026-83046 Auth required

    Oracle WebCenter Portal - Broken Access Control

    Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain an unauthorized access vulnerability caused by insufficient access controls in Runtime Tools, letting low privileged attackers with network access via HTTP access critical data and cause partial denial of service, exploit requires low privileged network access.

  • 8.5 /10 High
    CVE-2026-83045 Auth required

    Oracle WebCenter Portal - Broken Access Control

    Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain an unauthorized access vulnerability caused by insufficient access control in Runtime Tools, letting low privileged network attackers access and modify critical data, exploit requires low privilege network access via HTTP.

  • 7.1 /10 High
    CVE-2026-83044 Auth required

    Oracle Oracle XML Gateway - Broken Access Control

    Oracle E-Business Suite Oracle XML Gateway 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by insufficient access controls in Install component, letting low privileged attackers with network access via HTTP access critical data and cause partial denial of service, exploit requires low privileges.

  • 9.6 /10 Critical
    CVE-2026-83043 No auth

    Oracle WebCenter Portal - Authentication Bypass

    Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contains an authentication bypass caused by unauthenticated network access via HTTP, letting attackers take over the portal, exploit requires user interaction from a third party.

  • 9.8 /10 Critical
    CVE-2026-83042 No auth

    Oracle Identity Manager - Authentication Bypass

    Oracle Identity Manager 12.2.1.4.0 and 14.1.2.1.0 contain a remote takeover vulnerability caused by an easily exploitable flaw in OIM Legacy UI, letting unauthenticated attackers with network HTTP access fully compromise the system.

  • 7.7 /10 High
    CVE-2026-83041 Auth required

    Oracle WebCenter Portal - Broken Access Control

    Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contains an unauthorized access vulnerability caused by insufficient access control in Portlet Services, letting low privileged attackers with network access via HTTP access critical data, exploit requires low privileges.

  • 9.6 /10 Critical
    CVE-2026-83040 No auth

    Oracle WebCenter Portal - Remote Code Execution

    Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution caused by unauthenticated network access via SOAP, letting unauthenticated attackers with user interaction take over the portal, exploit requires human interaction from a third party.

  • 9.9 /10 Critical
    CVE-2026-83039 Auth required

    Oracle WebCenter Portal - Authentication Bypass

    Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contains a critical vulnerability in Composer, letting low privileged attackers with network access via HTTP fully compromise the portal and impact additional products, exploit requires network access.

  • 9.9 /10 Critical
    CVE-2026-83038 Auth required

    Oracle WebLogic Server - Remote Code Execution

    Oracle WebLogic Server 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 contain a remote code execution caused by a vulnerability in TopLink Integration, letting low privileged attackers with network access via HTTP take over the server, exploit requires network access with low privileges.

  • 9.8 /10 Critical
    CVE-2026-83037 No auth

    Oracle WebCenter Sites - Remote Code Execution

    Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution vulnerability caused by unauthenticated network access via HTTP, letting unauthenticated attackers fully compromise the system, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-83036 No auth

    Oracle WebCenter Sites - Remote Code Execution

    Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution caused by an easily exploitable vulnerability accessible via HTTP, letting unauthenticated attackers fully compromise the system, exploit requires network access.