Critical CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Critical CVEs
Newest first · severity as published by the vendor or NVD · page 100 of 125
- 9.9 /10 CriticalCVE-2026-82998 Auth required
Oracle Fusion Middleware Service Delivery Platform - Remote Code Execution
Oracle Fusion Middleware Service Delivery Platform 12.2.1.4.0 and 14.1.2.0.0 contains a remote code execution caused by network access via T3 and IIOP protocols, letting low privileged attackers take over the platform, exploit requires network access with low privileges.
- 9.9 /10 CriticalCVE-2026-82997 Auth required
Oracle Fusion Middleware Service Delivery Platform - Remote Code Execution
Oracle Fusion Middleware Service Delivery Platform 12.2.1.4.0 and 14.1.2.0.0 contains a remote code execution caused by network access via T3 and IIOP protocols, letting low privileged attackers take over the platform, exploit requires network access with low privileges.
- 9.8 /10 CriticalCVE-2026-82995 No auth
Oracle Platform Security for Java - Remote Code Execution
Oracle Platform Security for Java 12.2.1.4.0 and 14.1.2.0.0 contains a remote code execution caused by unauthenticated network access via SOAP, letting attackers fully compromise the system, exploit requires network access to SOAP service.
- 9.8 /10 CriticalCVE-2026-82994 No auth
Oracle Platform Security for Java - Authentication Bypass
Oracle Platform Security for Java 12.2.1.4.0 and 14.1.2.0.0 contains a critical vulnerability in Centralized Thirdparty Jars, letting unauthenticated network attackers via LDAP fully compromise the system, exploit requires network access via LDAP.
- 9.1 /10 CriticalCVE-2026-81855 No auth
Wärtsilä FOS-Onboard - Authentication Bypass
Wärtsilä FOS-Onboard contains a hardcoded cryptographic client authentication key vulnerability in the robot testing framework component, letting attackers potentially bypass authentication, exploit requires no special conditions.
- 9.9 /10 CriticalCVE-2026-79303 PoC publicAuth required
Kaiten - SQL Injection
Kaiten > 57.192.20 and < 57.214.26 contains a SQL injection caused by dynamic SQL statements without proper validation or parameterization, letting attackers execute arbitrary SQL commands remotely, exploit requires crafted input.
- 9.0 /10 CriticalCVE-2026-78225 No auth
Wärtsilä FOS-Onboard - Hardcoded Credentials
Wärtsilä FOS-Onboard contains a hardcoded cryptographic key vulnerability in the deployer-ng Update Controller component, letting attackers potentially compromise cryptographic security, exploit requires no special conditions.
- 9.1 /10 CriticalCVE-2026-76675 Auth required
EdgeConnect SD-WAN Gateways - Command Injection
EdgeConnect SD-WAN Gateways contain a command injection caused by improper input handling in the command line interface, letting authenticated remote attackers with high privileges execute arbitrary OS commands, exploit requires high privilege authentication.
- 9.8 /10 CriticalCVE-2026-76674 No auth
HPE Networking EdgeConnect SD-WAN Gateways - Buffer Overflow
HPE Networking EdgeConnect SD-WAN Gateways contain a buffer overflow caused by improper input handling in the underlying operating system, letting unauthenticated remote attackers execute arbitrary code, exploit requires network access.
- 9.8 /10 CriticalCVE-2026-76673 No auth
EdgeConnect SD-WAN Orchestrator - Authentication Bypass
EdgeConnect SD-WAN Orchestrator API contains an authentication bypass vulnerability caused by insufficient authentication controls, letting unauthenticated remote attackers gain administrative privileges, exploit requires no authentication.
- 9.9 /10 CriticalCVE-2026-76672 Auth required
SD-WAN Orchestrator - Information Disclosure
SD-WAN Orchestrator contains an information disclosure vulnerability caused by improper access control in the cache synchronization endpoint, letting authenticated remote attackers with read-only privileges disclose sensitive configuration data.
- 9.9 /10 CriticalCVE-2026-76670 Auth required
HPE Networking EdgeConnect SD-WAN Orchestrator - Privilege Escalation
HPE Networking EdgeConnect SD-WAN Orchestrator contains a privilege escalation vulnerability in its API, letting remote low-privileged authenticated users escalate to administrative privileges, exploit requires user authentication.
- 9.9 /10 CriticalCVE-2026-76669 Auth required
HPE Networking EdgeConnect SD-WAN Orchestrator - Privilege Escalation
HPE Networking EdgeConnect SD-WAN Orchestrator contains a privilege escalation vulnerability in its API, letting remote low-privileged authenticated users escalate to administrative privileges, exploit requires user authentication.
- 9.8 /10 CriticalCVE-2026-73963 No auth
Oracle WebCenter Portal - Remote Code Execution
Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution caused by unauthenticated network access via HTTP, letting attackers fully compromise the portal, exploit requires network access without authentication.
- 9.6 /10 CriticalCVE-2026-73962 Auth required
Oracle Access Manager - Broken Access Control
Oracle Access Manager 12.2.1.4.0 and 14.1.2.1.0 contain a broken access control vulnerability caused by insufficient authorization in the Authentication Engine, letting low privileged attackers with network access via HTTPS create, delete, or modify critical data, exploit requires low privileged network access.