Critical CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 13360
- Critical
- 2486
- CISA KEV
- 125
- Public PoC
- 437
Most common types
- Broken Access Control 1691
- Remote Code Execution 1609
- Privilege Escalation 1307
- Authentication Bypass 1121
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 3 Nov 2026
Critical CVEs
Newest first · severity as published by the vendor or NVD · page 142 of 166
- 9.8 /10 CriticalCVE-2026-76674 No auth
HPE Networking EdgeConnect SD-WAN Gateways - Buffer Overflow
HPE Networking EdgeConnect SD-WAN Gateways contain a buffer overflow caused by improper input handling in the underlying operating system, letting unauthenticated remote attackers execute arbitrary code, exploit requires network access.
- 9.8 /10 CriticalCVE-2026-76673 No auth
EdgeConnect SD-WAN Orchestrator - Authentication Bypass
EdgeConnect SD-WAN Orchestrator API contains an authentication bypass vulnerability caused by insufficient authentication controls, letting unauthenticated remote attackers gain administrative privileges, exploit requires no authentication.
- 9.9 /10 CriticalCVE-2026-76672 Auth required
SD-WAN Orchestrator - Information Disclosure
SD-WAN Orchestrator contains an information disclosure vulnerability caused by improper access control in the cache synchronization endpoint, letting authenticated remote attackers with read-only privileges disclose sensitive configuration data.
- 9.9 /10 CriticalCVE-2026-76670 Auth required
HPE Networking EdgeConnect SD-WAN Orchestrator - Privilege Escalation
HPE Networking EdgeConnect SD-WAN Orchestrator contains a privilege escalation vulnerability in its API, letting remote low-privileged authenticated users escalate to administrative privileges, exploit requires user authentication.
- 9.9 /10 CriticalCVE-2026-76669 Auth required
HPE Networking EdgeConnect SD-WAN Orchestrator - Privilege Escalation
HPE Networking EdgeConnect SD-WAN Orchestrator contains a privilege escalation vulnerability in its API, letting remote low-privileged authenticated users escalate to administrative privileges, exploit requires user authentication.
- 9.8 /10 CriticalCVE-2026-73963 No auth
Oracle WebCenter Portal - Remote Code Execution
Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution caused by unauthenticated network access via HTTP, letting attackers fully compromise the portal, exploit requires network access without authentication.
- 9.6 /10 CriticalCVE-2026-73962 Auth required
Oracle Access Manager - Broken Access Control
Oracle Access Manager 12.2.1.4.0 and 14.1.2.1.0 contain a broken access control vulnerability caused by insufficient authorization in the Authentication Engine, letting low privileged attackers with network access via HTTPS create, delete, or modify critical data, exploit requires low privileged network access.
- 9.8 /10 CriticalCVE-2026-73961 No auth
Oracle JDeveloper - Remote Code Execution
Oracle JDeveloper 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution caused by unauthenticated network access via HTTP in ADF Faces, letting attackers fully compromise the system, exploit requires network access.
- 9.3 /10 CriticalCVE-2026-73957 No auth
Oracle WebCenter Portal - Broken Access Control
Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain a broken access control vulnerability in Portlet Services, letting unauthenticated attackers with network access via HTTP and user interaction create, delete, or modify critical data, exploit requires user interaction from a third party.
- 9.8 /10 CriticalCVE-2026-73956 No auth
Oracle WebCenter Portal - Remote Code Execution
Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain an unauthenticated remote code execution vulnerability in Composer, letting attackers with network access via HTTP fully compromise the portal, exploit requires network access.
- 9.8 /10 CriticalCVE-2026-73953 No auth
Oracle WebCenter Portal - Remote Code Execution
Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain a remote code execution vulnerability in Portlet Services, letting unauthenticated attackers with network access via HTTP fully compromise the system, exploit requires network access.
- 9.1 /10 CriticalCVE-2026-73952 No auth
Oracle WebCenter Portal - Broken Access Control
Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contain a broken access control vulnerability in Portlet Services, letting unauthenticated network attackers create, delete, or modify critical data, exploit requires network access via HTTP.
- 9.8 /10 CriticalCVE-2026-73950 No auth
Oracle Access Manager - Authentication Bypass
Oracle Access Manager 12.2.1.4.0 and 14.1.2.1.0 contain an authentication bypass caused by a flaw in the Authentication Engine, letting unauthenticated network attackers fully compromise the system, exploit requires network access via HTTP.
- 9.9 /10 CriticalCVE-2026-73948 Auth required
Oracle WebCenter Portal - Authentication Bypass
Oracle WebCenter Portal 12.2.1.4.0 and 14.1.2.0.0 contains a critical vulnerability in Composer component, letting low privileged attackers with network access via HTTP take over the portal, exploit requires low privileges.
- 9.8 /10 CriticalCVE-2026-73947 No auth
Oracle Access Manager - Authentication Bypass
Oracle Access Manager 12.2.1.4.0 and 14.1.2.0.0 contain an authentication bypass vulnerability in the Authentication Engine, letting unauthenticated remote attackers take over the system, exploit requires network access via HTTP.