High CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

High CVEs

Newest first · severity as published by the vendor or NVD · page 420 of 556

  • 8.8 /10 High
    CVE-2026-83479 Auth required

    Oracle E-Business Suite Oracle Contracts - Remote Code Execution

    Oracle E-Business Suite Oracle Contracts 12.2.14-12.2.15 contains a remote code execution caused by an easily exploitable vulnerability in Internal Operations, letting low privileged attackers with network access via HTTP take over the product, exploit requires low privileges.

  • 8.1 /10 High
    CVE-2026-83477

    Oracle Work in Process - Broken Access Control

    Oracle Work in Process 12.2.3-12.2.15 contains a broken access control vulnerability caused by unauthenticated attacker access to the physical communication segment, letting attackers create, delete, or modify critical data, exploit requires physical network access.

  • 8.2 /10 High
    CVE-2026-83465 No auth

    Oracle Mobile Application Server - Broken Access Control

    Oracle Mobile Application Server 12.2.3-12.2.15 contains a broken access control vulnerability caused by improper authorization in MWA Terminal Server, letting unauthenticated attackers cause denial of service and data modification, exploit requires user interaction.

  • 8.1 /10 High
    CVE-2026-83464 No auth

    Oracle Mobile Application Server - Remote Code Execution

    Oracle Mobile Application Server 12.2.3-12.2.15 contains a remote takeover vulnerability caused by an unspecified issue in MWA Terminal Server, letting unauthenticated attackers with network access compromise the server, exploit requires high attack complexity.

  • 7.5 /10 High
    CVE-2026-83463

    Oracle Mobile Application Server - Authentication Bypass

    Oracle Mobile Application Server 12.2.3-12.2.15 contains a takeover vulnerability caused by access to the physical communication segment in MWA Terminal Server, letting unauthenticated attackers compromise the server, exploit requires physical network access.

  • 8.2 /10 High
    CVE-2026-83461 No auth

    Oracle Mobile Application Server - Broken Access Control

    Oracle Mobile Application Server 12.2.3-12.2.15 contains an unauthenticated network access vulnerability in MWA Terminal Server, letting attackers gain unauthorized access to critical data and cause partial denial of service, exploit requires network access via TCP.

  • 8.1 /10 High
    CVE-2026-83457 Auth required

    Oracle Demand Signal Repository - Broken Access Control

    Oracle Demand Signal Repository 12.2.3-12.2.15 contains a broken access control vulnerability in Internal Operations, letting low privileged attackers with network HTTP access modify critical data or cause denial of service.

  • 8.8 /10 High
    CVE-2026-83456 Auth required

    Oracle Demand Signal Repository - Remote Code Execution

    Oracle Demand Signal Repository 12.2.3-12.2.15 contains a remote code execution caused by an easily exploitable vulnerability in Internal Operations, letting low privileged attackers with network access via HTTP take over the system, exploit requires network access.

  • 8.1 /10 High
    CVE-2026-83455 Auth required

    Oracle Demand Signal Repository - Broken Access Control

    Oracle Demand Signal Repository 12.2.3-12.2.15 contains a broken access control vulnerability caused by insufficient privilege checks in Internal Operations, letting low privileged attackers with network access via HTTP modify or access critical data.

  • 8.8 /10 High
    CVE-2026-83454 Auth required

    Oracle Document Management and Collaboration - Remote Code Execution

    Oracle Document Management and Collaboration 12.2.3-12.2.15 contains a remote code execution caused by internal operations vulnerability, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileges.

  • 7.2 /10 High
    CVE-2026-83453 Auth required

    Oracle Document Management and Collaboration - Remote Code Execution

    Oracle Document Management and Collaboration 12.2.3-12.2.15 contains a remote code execution caused by internal operations vulnerability, letting high privileged attackers with network access via HTTP take over the system, exploit requires high privileges.

  • 8.5 /10 High
    CVE-2026-83451 Auth required

    Oracle Oracle Product Workbench - Authentication Bypass

    Oracle E-Business Suite Oracle Product Workbench 12.2.3-12.2.15 contains a takeover vulnerability caused by an internal operations flaw, letting low privileged attackers with network access via HTTP compromise the product, exploit requires low privileges and network access.

  • 8.0 /10 High
    CVE-2026-83450 Auth required

    Oracle Bills of Material - Authentication Bypass

    Oracle Bills of Material 12.2.3-12.2.15 contains a takeover vulnerability caused by a difficult to exploit issue in Setup Workbench, letting high privileged attackers with network access via HTTP compromise the product, exploit requires high privileges.

  • 8.5 /10 High
    CVE-2026-83449 Auth required

    Oracle Bills of Material - Broken Access Control

    Oracle Bills of Material 12.2.3-12.2.15 contains an unauthorized access and partial denial of service vulnerability caused by insufficient access controls in Internal Operations, letting low privileged attackers with network access via HTTP compromise critical data and cause partial service disruption, exploit requires low privileged network access.

  • 8.1 /10 High
    CVE-2026-83448 Auth required

    Oracle Bills of Material - Broken Access Control

    Oracle Bills of Material 12.2.3-12.2.15 contains a broken access control vulnerability caused by insufficient privilege checks in Internal Operations, letting low privileged attackers with network access via HTTP modify or access critical data.