Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 542 of 677

  • 8.1 /10 High
    CVE-2026-73954 No auth

    Oracle PeopleSoft PeopleTools - Remote Code Execution

    Oracle PeopleSoft PeopleTools 8.61-8.63 contains a remote code execution vulnerability caused by a flaw in Business Interlink, letting unauthenticated attackers with network access via HTTP take over the system, exploit requires network access with high complexity.

  • 9.8 /10 Critical
    CVE-2026-73953 No auth

    Oracle WebCenter Portal - Remote Code Execution

    Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution vulnerability in Portlet Services, letting unauthenticated attackers with network access via HTTP fully compromise the system, exploit requires network access.

  • 9.1 /10 Critical
    CVE-2026-73952 No auth

    Oracle WebCenter Portal - Broken Access Control

    Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain a broken access control vulnerability in Portlet Services, letting unauthenticated network attackers create, delete, or modify critical data, exploit requires network access via HTTP.

  • 8.1 /10 High
    CVE-2026-73951 No auth

    Oracle WebCenter Portal - Remote Code Execution

    Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contains a vulnerability in Portlet Services that allows unauthenticated remote attackers with network access via HTTP to compromise the system, potentially leading to full takeover.

  • 9.8 /10 Critical
    CVE-2026-73950 No auth

    Oracle Access Manager - Authentication Bypass

    Oracle Access Manager 12.2.1.4.0 and 14.1.2.1.0 contain an authentication bypass caused by a flaw in the Authentication Engine, letting unauthenticated network attackers fully compromise the system, exploit requires network access via HTTP.

  • 8.8 /10 High
    CVE-2026-73949 Auth required

    Oracle WebCenter Portal - Remote Code Execution

    Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution caused by a vulnerability in Portlet Services, letting low privileged attackers with network access via HTTP take over the portal, exploit requires low privilege network access.

  • 9.9 /10 Critical
    CVE-2026-73948 Auth required

    Oracle WebCenter Portal - Authentication Bypass

    Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contains a critical vulnerability in Composer component, letting low privileged attackers with network access via HTTP take over the portal, exploit requires low privileges.

  • 9.8 /10 Critical
    CVE-2026-73947 No auth

    Oracle Access Manager - Authentication Bypass

    Oracle Access Manager 12.2.1.4.0 and 14.1.2.0.0 contain an authentication bypass vulnerability in the Authentication Engine, letting unauthenticated remote attackers take over the system, exploit requires network access via HTTP.

  • 9.1 /10 Critical
    CVE-2026-73946 Auth required

    Oracle Access Manager - Authentication Bypass

    Oracle Access Manager 12.2.1.4.0 and 14.1.2.1.0 contain an authentication bypass caused by a vulnerability in the Authentication Engine, letting high privileged attackers with network access via HTTP take over the system, exploit requires high privileges.

  • 9.9 /10 Critical
    CVE-2026-73945 Auth required

    Oracle Access Manager - Authentication Bypass

    Oracle Access Manager 12.2.1.4.0 and 14.1.2.1.0 contain an authentication bypass caused by a vulnerability in the Authentication Engine, letting low privileged attackers with network access via HTTP take over the system, exploit requires network access.

  • 9.1 /10 Critical
    CVE-2026-73944 No auth

    Oracle Access Manager - Authentication Bypass

    Oracle Access Manager 12.2.1.4.0 and 14.1.2.1.0 contain an authentication bypass caused by unauthenticated network access via HTTP, letting attackers create, delete, modify, or access critical data without authentication.

  • 7.6 /10 High
    CVE-2026-73943 Auth required

    Oracle Identity Manager - Broken Access Control

    Oracle Identity Manager 12.2.1.4.0 and 14.1.2.1.0 contain an unauthorized access vulnerability caused by improper access control in OIM Legacy UI, letting high privileged attackers with network access via HTTP compromise data integrity and confidentiality, exploit requires high privileges.

  • 8.8 /10 High
    CVE-2026-73942 Auth required

    Oracle Identity Manager - Authentication Bypass

    Oracle Identity Manager 12.2.1.4.0 and 14.1.2.1.0 contain a remote takeover vulnerability caused by an easily exploitable issue in OIM Legacy UI, letting low privileged attackers with network access fully compromise the system, exploit requires network access via HTTP.

  • 8.6 /10 High
    CVE-2026-73941 No auth

    Oracle Access Manager - Authentication Bypass

    Oracle Access Manager 12.2.1.4.0 and 14.1.2.1.0 contain an authentication bypass caused by an easily exploitable vulnerability in the Authentication Engine, letting unauthenticated attackers with network access via HTTP gain unauthorized access to critical data, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-73940 No auth

    Oracle Access Manager - Authentication Bypass

    Oracle Access Manager 12.2.1.4.0 and 14.1.2.1.0 contain an authentication bypass caused by unauthenticated network access via T3 and IIOP protocols, letting remote attackers fully compromise the system without authentication.