High CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

High CVEs

Newest first · severity as published by the vendor or NVD · page 412 of 556

  • 7.5 /10 High
    CVE-2026-87247 Auth required

    Oracle Hyperion Financial Management - Authentication Bypass

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a security vulnerability caused by unspecified issues in the Security component, letting low privileged attackers with network access via HTTP take over the system, exploit requires network access with low privileges.

  • 7.2 /10 High
    CVE-2026-87246 Auth required

    Oracle Hyperion Financial Management - Authentication Bypass

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a security vulnerability allowing high privileged attackers with network access via HTTP to compromise the system, leading to full takeover.

  • 8.0 /10 High
    CVE-2026-87245

    Oracle Hyperion Financial Management - Remote Code Execution

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a remote code execution caused by vulnerability in Security component, letting low privileged attackers with physical network access take over the system, exploit requires physical communication segment access.

  • 7.2 /10 High
    CVE-2026-87244 Auth required

    Oracle Hyperion Financial Management - Authentication Bypass

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a security vulnerability caused by improper access control, letting high privileged attackers with network access via HTTP take over the system, exploit requires high privileges.

  • 8.0 /10 High
    CVE-2026-87243

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a broken access control vulnerability caused by insufficient protection on the physical communication segment, letting unauthenticated attackers with physical network access modify or access critical data, exploit requires physical access to the communication segment.

  • 7.4 /10 High
    CVE-2026-87242

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a security vulnerability caused by insufficient access controls, letting unauthenticated attackers with network access via TLS modify or access critical data, exploit requires network access via TLS.

  • 8.1 /10 High
    CVE-2026-87241

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a broken access control vulnerability caused by unauthenticated attacker access to the physical communication segment, letting attackers create, delete, or modify critical data, exploit requires physical network access.

  • 7.0 /10 High
    CVE-2026-87240 Auth required

    Oracle Hyperion Financial Management - Authentication Bypass

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a takeover vulnerability caused by a security issue in the infrastructure, letting low privileged attackers with logon compromise the system, exploit requires attacker logon to infrastructure.

  • 7.2 /10 High
    CVE-2026-87239 Auth required

    Oracle Hyperion Financial Management - Remote Code Execution

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a remote code execution caused by a security vulnerability, letting high privileged attackers with network access via HTTP take over the system, exploit requires high privileges.

  • 8.8 /10 High
    CVE-2026-87238 Auth required

    Oracle Hyperion Financial Management - SQL Injection

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a sql injection caused by improper input validation in the Security component, letting low privileged attackers with network access compromise the system, exploit requires low privilege network access.

  • 7.5 /10 High
    CVE-2026-87237 Auth required

    Oracle Hyperion Financial Management - Authentication Bypass

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a security vulnerability caused by unspecified issues in the Security component, letting low privileged attackers with network access via HTTP take over the system, exploit requires network access with low privileges.

  • 7.1 /10 High
    CVE-2026-87236 Auth required

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains an unauthorized access and partial denial of service vulnerability caused by security weaknesses, letting low privileged attackers with network access via HTTP compromise critical data and cause partial DoS, exploit requires low privileged network access.

  • 7.4 /10 High
    CVE-2026-87235

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a broken access control vulnerability in Security component, letting unauthenticated attackers with network SSH access modify or access critical data, exploit requires network access via SSH.

  • 8.1 /10 High
    CVE-2026-87234 Auth required

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a broken access control vulnerability caused by insufficient privilege checks in the Security component, letting low privileged attackers with network access via HTTP modify or access critical data.

  • 7.6 /10 High
    CVE-2026-87233 Auth required

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains an unauthorized access and partial denial of service vulnerability caused by security flaws in the Security component, letting high privileged attackers with network access via HTTP compromise critical data and availability, exploit requires high privileges.