Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 543 of 677

  • 8.7 /10 High
    CVE-2026-73926 Auth required

    Oracle Access Manager - Broken Access Control

    Oracle Access Manager 12.2.1.4.0 and 14.1.2.1.0 contain a broken access control vulnerability caused by improper authorization in the Authentication Engine, letting high privileged attackers with network access via HTTP modify or access critical data, exploit requires high privileges.

  • 9.8 /10 Critical
    CVE-2026-73807

    mySCADA myPRO Manager - Authentication Bypass

    mySCADA myPRO Manager contains a broken authentication caused by improper enforcement of authentication for privileged command API functions, letting unauthenticated attackers with network access access privileged management functions.

  • 8.2 /10 High
    CVE-2026-73458 No auth

    Arista EOS - Denial of Service

    Arista EOS contains a denial of service caused by specially crafted packets targeting authenticated Bidirectional Forwarding Detection (BFD) sessions, letting attackers disrupt BFD sessions and cause network instability, exploit requires authenticated BFD sessions.

  • 9.6 /10 Critical
    CVE-2026-73437 No auth

    Arista EOS - Misconfiguration

    Arista EOS with DHCP relay configured contains a vulnerability caused by lack of source validation in DHCP reply forwarding, letting unauthenticated attackers with network access supply malicious network parameters, exploit requires network access.

  • 9.9 /10 Critical
    CVE-2026-71163 Auth required

    Oracle Access Manager - Broken Access Control

    Oracle Access Manager 12.2.1.4.0 and 14.1.2.1.0 contain a broken access control vulnerability caused by improper authorization in the Authentication Engine, letting low privileged attackers with network access via HTTP create, modify, or delete critical data, and cause partial denial of service, exploit requires low privileged network access.

  • 10.0 /10 Critical
    CVE-2026-71133 No auth

    Oracle Access Manager - Authentication Bypass

    Oracle Access Manager 12.2.1.4.0 and 14.1.2.1.0 contain an authentication bypass caused by a vulnerability in the Authentication Engine, letting unauthenticated network attackers fully compromise the system, exploit requires network access via HTTP.

  • 8.8 /10 High
    CVE-2026-71047 Auth required

    Oracle Identity Manager - Remote Code Execution

    Oracle Identity Manager 12.2.1.4.0 and 14.1.2.1.0 contain a remote code execution caused by an easily exploitable vulnerability in the core component, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileges and network access.

  • 8.8 /10 High
    CVE-2026-70915 Auth required

    Oracle Identity Manager - Remote Code Execution

    Oracle Identity Manager 12.2.1.4.0 and 14.1.2.1.0 contain a remote code execution caused by network access via T3 and IIOP protocols, letting low privileged attackers take over the system, exploit requires network access and low privileges.

  • 9.8 /10 Critical
    CVE-2026-70913 No auth

    Oracle Identity Manager - Remote Code Execution

    Oracle Identity Manager 12.2.1.4.0 and 14.1.2.1.0 contain a remote code execution caused by an easily exploitable vulnerability in the core component, letting unauthenticated attackers with network access via HTTP fully compromise the system, exploit requires network access via HTTP.

  • 9.8 /10 Critical
    CVE-2026-70757

    Oracle WebLogic Server - Remote Code Execution

    Oracle WebLogic Server 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 contain a remote code execution caused by unauthenticated network access via T3 and IIOP protocols, letting attackers fully compromise the server, exploit requires network access to T3 or IIOP.

  • 9.8 /10 Critical
    CVE-2026-70756 No auth

    Oracle WebLogic Server - Remote Code Execution

    Oracle WebLogic Server 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 contain a remote code execution caused by unauthenticated network access via T3 and IIOP protocols, letting attackers fully compromise the server, exploit requires network access.

  • 9.8 /10 Critical
    CVE-2026-70748 No auth

    Oracle WebLogic Server - Remote Code Execution

    Oracle WebLogic Server 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 contains a remote code execution caused by unauthenticated network access via T3 and IIOP protocols, letting attackers fully compromise the server, exploit requires network access.

  • 8.8 /10 High
    CVE-2026-69486 No auth

    Microsoft Edge - Remote Code Execution

    Microsoft Edge (Chromium-based) contains a heap-based buffer overflow allowing unauthorized attackers to execute code remotely over a network, exploit requires no special privileges.

  • 7.5 /10 High
    CVE-2026-69218 No auth

    Http4s - Denial of Service

    Http4s prior to 0.23.35 and 1.0.0-M47 contains a denial of service caused by unbounded buffering of HTTP/2 header blocks in H2Connection, letting remote attackers exhaust heap memory, exploit requires sending incomplete header blocks.

  • 8.7 /10 High
    CVE-2026-69217 No auth

    Http4s - HTTP Request Smuggling

    Http4s prior to 0.23.35 and 1.0.0-M47 contains an HTTP request smuggling vulnerability caused by accepting differing duplicate Content-Length headers and using the last value, letting unauthenticated attackers bypass front-end controls and poison caches, exploit requires attacker to send crafted CL.CL requests.