Critical CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 13360
- Critical
- 2486
- CISA KEV
- 125
- Public PoC
- 437
Most common types
- Broken Access Control 1691
- Remote Code Execution 1609
- Privilege Escalation 1307
- Authentication Bypass 1121
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026
Critical CVEs
Newest first · severity as published by the vendor or NVD · page 141 of 166
- 9.3 /10 CriticalCVE-2026-83027
Oracle Identity Manager Connector - Broken Access Control
Oracle Identity Manager Connector 12.2.1.4.0 and 14.1.2.1.0 contains an unauthorized data access vulnerability caused by insufficient access control in the core component, letting unauthenticated attackers with physical network access create, delete, or modify critical data, exploit requires access to the physical communication segment.
- 10.0 /10 CriticalCVE-2026-83021 No auth
Oracle WebLogic Server - Remote Code Execution
Oracle WebLogic Server 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0 contain a remote code execution caused by unauthenticated network access via HTTP, letting attackers fully compromise the server, exploit requires network access.
- 10.0 /10 CriticalCVE-2026-83020 No auth
Oracle Platform Security for Java - Remote Code Execution
Oracle Platform Security for Java 12.2.1.4.0 and 14.1.2.0.0 contains a remote code execution caused by unauthenticated network access via HTTP, letting attackers fully compromise the system, exploit requires network access.
- 9.1 /10 CriticalCVE-2026-83006 Auth required
Oracle WebCenter Enterprise Capture - Remote Code Execution
Oracle WebCenter Enterprise Capture 12.2.1.4.0 and 14.1.2.0.0 contains a remote code execution caused by an easily exploitable vulnerability in Client Bundle, letting high privileged attackers with network access via HTTP take over the system, exploit requires high privileges.
- 9.1 /10 CriticalCVE-2026-83001 Auth required
Oracle Access Manager - Authentication Bypass
Oracle Access Manager 12.2.1.4.0 and 14.1.2.1.0 contain an authentication bypass caused by a vulnerability in the Authentication Engine, letting high privileged attackers with network access via HTTP take over the system, exploit requires high privileges.
- 9.8 /10 CriticalCVE-2026-83000 No auth
Oracle Fusion Middleware Service Delivery Platform - Remote Code Execution
Oracle Fusion Middleware Service Delivery Platform 12.2.1.4.0 and 14.1.2.0.0 contains a remote code execution caused by unauthenticated network access via HTTP, letting attackers fully compromise the platform, exploit requires network access.
- 9.9 /10 CriticalCVE-2026-82999 Auth required
Oracle Fusion Middleware Service Delivery Platform - Remote Code Execution
Oracle Fusion Middleware Service Delivery Platform 12.2.1.4.0 and 14.1.2.0.0 contains a remote code execution caused by a vulnerability in Messaging Enabler, letting low privileged attackers with network access via HTTP take over the platform, exploit requires low privilege network access.
- 9.9 /10 CriticalCVE-2026-82998 Auth required
Oracle Fusion Middleware Service Delivery Platform - Remote Code Execution
Oracle Fusion Middleware Service Delivery Platform 12.2.1.4.0 and 14.1.2.0.0 contains a remote code execution caused by network access via T3 and IIOP protocols, letting low privileged attackers take over the platform, exploit requires network access with low privileges.
- 9.9 /10 CriticalCVE-2026-82997 Auth required
Oracle Fusion Middleware Service Delivery Platform - Remote Code Execution
Oracle Fusion Middleware Service Delivery Platform 12.2.1.4.0 and 14.1.2.0.0 contains a remote code execution caused by network access via T3 and IIOP protocols, letting low privileged attackers take over the platform, exploit requires network access with low privileges.
- 9.8 /10 CriticalCVE-2026-82995 No auth
Oracle Platform Security for Java - Remote Code Execution
Oracle Platform Security for Java 12.2.1.4.0 and 14.1.2.0.0 contains a remote code execution caused by unauthenticated network access via SOAP, letting attackers fully compromise the system, exploit requires network access to SOAP service.
- 9.8 /10 CriticalCVE-2026-82994 No auth
Oracle Platform Security for Java - Authentication Bypass
Oracle Platform Security for Java 12.2.1.4.0 and 14.1.2.0.0 contains a critical vulnerability in Centralized Thirdparty Jars, letting unauthenticated network attackers via LDAP fully compromise the system, exploit requires network access via LDAP.
- 9.1 /10 CriticalCVE-2026-81855 No auth
Wärtsilä FOS-Onboard - Authentication Bypass
Wärtsilä FOS-Onboard contains a hardcoded cryptographic client authentication key vulnerability in the robot testing framework component, letting attackers potentially bypass authentication, exploit requires no special conditions.
- 9.9 /10 CriticalCVE-2026-79303 PoC publicAuth required
Kaiten - SQL Injection
Kaiten > 57.192.20 and < 57.214.26 contains a SQL injection caused by dynamic SQL statements without proper validation or parameterization, letting attackers execute arbitrary SQL commands remotely, exploit requires crafted input.
- 9.0 /10 CriticalCVE-2026-78225 No auth
Wärtsilä FOS-Onboard - Hardcoded Credentials
Wärtsilä FOS-Onboard contains a hardcoded cryptographic key vulnerability in the deployer-ng Update Controller component, letting attackers potentially compromise cryptographic security, exploit requires no special conditions.
- 9.1 /10 CriticalCVE-2026-76675 Auth required
EdgeConnect SD-WAN Gateways - Command Injection
EdgeConnect SD-WAN Gateways contain a command injection caused by improper input handling in the command line interface, letting authenticated remote attackers with high privileges execute arbitrary OS commands, exploit requires high privilege authentication.