Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 541 of 677

  • 9.9 /10 Critical
    CVE-2026-76672 Auth required

    SD-WAN Orchestrator - Information Disclosure

    SD-WAN Orchestrator contains an information disclosure vulnerability caused by improper access control in the cache synchronization endpoint, letting authenticated remote attackers with read-only privileges disclose sensitive configuration data.

  • 9.9 /10 Critical
    CVE-2026-76670 Auth required

    HPE Networking EdgeConnect SD-WAN Orchestrator - Privilege Escalation

    HPE Networking EdgeConnect SD-WAN Orchestrator contains a privilege escalation vulnerability in its API, letting remote low-privileged authenticated users escalate to administrative privileges, exploit requires user authentication.

  • 9.9 /10 Critical
    CVE-2026-76669 Auth required

    HPE Networking EdgeConnect SD-WAN Orchestrator - Privilege Escalation

    HPE Networking EdgeConnect SD-WAN Orchestrator contains a privilege escalation vulnerability in its API, letting remote low-privileged authenticated users escalate to administrative privileges, exploit requires user authentication.

  • 7.5 /10 High
    CVE-2026-75983 Auth required

    Eventin - Privilege Escalation

    Eventin WordPress plugin <= 4.1.23 contains a privilege escalation caused by improper capability checks in PermissionManager::manage_permissions(), letting authenticated attackers with user ID 1 gain administrator privileges, exploit requires user ID 1 to have a lower-privilege role.

  • 7.3 /10 High
    CVE-2026-75092 Auth required

    leapp-upgrade-el9toel10 - Privilege Escalation

    leapp-upgrade-el9toel10 contains a privilege escalation caused by mysqld running as root bypassing systemd user context, letting attackers with mysql OS identity execute code as root during upgrade, exploit requires mysql OS-level execution and admin running Leapp upgrade.

  • 7.2 /10 High
    CVE-2026-73966 Auth required

    Oracle Siebel CRM Siebel Apps - Marketing - Authentication Bypass

    Oracle Siebel CRM Siebel Apps - Marketing 17.0-26.7 contains a vulnerability allowing high privileged attackers with network access via HTTP to take over the application, exploit requires high privileges.

  • 9.8 /10 Critical
    CVE-2026-73963 No auth

    Oracle WebCenter Portal - Remote Code Execution

    Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution caused by unauthenticated network access via HTTP, letting attackers fully compromise the portal, exploit requires network access without authentication.

  • 9.6 /10 Critical
    CVE-2026-73962 Auth required

    Oracle Access Manager - Broken Access Control

    Oracle Access Manager 12.2.1.4.0 and 14.1.2.1.0 contain a broken access control vulnerability caused by insufficient authorization in the Authentication Engine, letting low privileged attackers with network access via HTTPS create, delete, or modify critical data, exploit requires low privileged network access.

  • 9.8 /10 Critical
    CVE-2026-73961 No auth

    Oracle JDeveloper - Remote Code Execution

    Oracle JDeveloper 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution caused by unauthenticated network access via HTTP in ADF Faces, letting attackers fully compromise the system, exploit requires network access.

  • 7.5 /10 High
    CVE-2026-73960 No auth

    Oracle PeopleSoft Enterprise PeopleTools - Denial of Service

    Oracle PeopleSoft Enterprise PeopleTools 8.61-8.63 contains a denial of service caused by unauthenticated network access via HTTP in Ren Server, letting attackers cause application hang or crash, exploit requires network access.

  • 8.8 /10 High
    CVE-2026-73959 Auth required

    Oracle WebCenter Portal - Authentication Bypass

    Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contains a vulnerability in Composer component, letting low privileged attackers with network access via HTTP fully compromise the portal, exploit requires low privilege network access.

  • 8.1 /10 High
    CVE-2026-73958 No auth

    Oracle Access Manager - Authentication Bypass

    Oracle Access Manager 12.2.1.4.0 and 14.1.2.0.0 contain an authentication bypass caused by a vulnerability in the Authentication Engine, letting unauthenticated attackers with network access via HTTP take over the system, exploit requires network access with high complexity.

  • 9.3 /10 Critical
    CVE-2026-73957 No auth

    Oracle WebCenter Portal - Broken Access Control

    Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain a broken access control vulnerability in Portlet Services, letting unauthenticated attackers with network access via HTTP and user interaction create, delete, or modify critical data, exploit requires user interaction from a third party.

  • 9.8 /10 Critical
    CVE-2026-73956 No auth

    Oracle WebCenter Portal - Remote Code Execution

    Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain an unauthenticated remote code execution vulnerability in Composer, letting attackers with network access via HTTP fully compromise the portal, exploit requires network access.

  • 7.3 /10 High
    CVE-2026-73955 Auth required

    Oracle PeopleSoft PeopleTools - Broken Access Control

    Oracle PeopleSoft PeopleTools 8.61-8.63 contains a broken access control vulnerability caused by improper authorization in Charting component, letting low privileged attackers with network access via HTTP and user interaction modify or access critical data.