High CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

High CVEs

Newest first · severity as published by the vendor or NVD · page 413 of 556

  • 8.1 /10 High
    CVE-2026-87232

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a broken access control vulnerability in Security component, letting unauthenticated attackers with physical network access create, delete, or modify critical data, exploit requires physical access to communication segment.

  • 8.1 /10 High
    CVE-2026-87231 No auth

    Oracle Hyperion Financial Management - Authentication Bypass

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a security vulnerability caused by an unspecified issue in the Security component, letting unauthenticated remote attackers with network access via HTTP take over the system, exploit requires high attack complexity.

  • 8.2 /10 High
    CVE-2026-87229 No auth

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a broken access control vulnerability in Security component, letting unauthenticated network attackers via HTTP create, delete, modify, or read critical data, exploit requires network access.

  • 8.2 /10 High
    CVE-2026-87228 No auth

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains an unauthorized access vulnerability caused by insufficient access control in the Security component, letting unauthenticated network attackers access and modify critical data via HTTP.

  • 8.8 /10 High
    CVE-2026-87227 Auth required

    Oracle Hyperion Financial Management - Authentication Bypass

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a security vulnerability allowing low privileged attackers with network access via HTTP to compromise the system, letting attackers take over the product, exploit requires low privileges and network access.

  • 8.8 /10 High
    CVE-2026-87226 Auth required

    Oracle Hyperion Financial Management - Remote Code Execution

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a remote code execution caused by a security vulnerability in the Security component, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileges.

  • 7.1 /10 High
    CVE-2026-87225 Auth required

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains an unauthorized access and partial denial of service vulnerability caused by security flaws, letting low privileged attackers with network access via HTTP compromise critical data and cause partial DoS, exploit requires low privileges and network access.

  • 8.8 /10 High
    CVE-2026-87224 Auth required

    Oracle Hyperion Financial Management - Authentication Bypass

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a security vulnerability caused by insufficient access control, letting low privileged attackers with network access via HTTP fully compromise the system, exploit requires low privileges.

  • 7.5 /10 High
    CVE-2026-87222 No auth

    Oracle Hyperion Financial Management - Denial of Service

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a denial of service vulnerability caused by improper handling in the Security component, letting unauthenticated remote attackers cause application hang or crash via HTTP.

  • 7.5 /10 High
    CVE-2026-87221 No auth

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains an unauthorized access vulnerability caused by insufficient access control in the Security component, letting unauthenticated attackers with network access via HTTP access critical data, exploit requires network access via HTTP.

  • 7.1 /10 High
    CVE-2026-87220

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a denial of service and data tampering vulnerability caused by unauthenticated access to the physical communication segment, letting attackers cause crashes and unauthorized data modification, exploit requires physical network access.

  • 8.4 /10 High
    CVE-2026-87219 Auth required

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a broken access control vulnerability in Security component, letting low privileged logged-in attackers create, delete, or modify critical data, exploit requires attacker login.

  • 8.1 /10 High
    CVE-2026-87218

    Oracle Hyperion Financial Management - Broken Access Control

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a broken access control vulnerability caused by unauthenticated attacker access to the physical communication segment, letting attackers modify critical data and cause denial of service, exploit requires physical network access.

  • 7.8 /10 High
    CVE-2026-87216 Auth required

    Oracle Hyperion Financial Management - Privilege Escalation

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a privilege escalation vulnerability in the Security component, letting low privileged attackers with logon access takeover the system, exploit requires attacker to have logon privileges.

  • 7.5 /10 High
    CVE-2026-87215 No auth

    Oracle Hyperion Financial Management - Denial of Service

    Oracle Hyperion Financial Management 11.2.26.0.000 contains a denial of service caused by unauthenticated network access via TCP, letting attackers cause a hang or crash, exploit requires network access.