High CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

High CVEs

Newest first · severity as published by the vendor or NVD · page 430 of 556

  • 7.7 /10 High
    CVE-2026-83233 Auth required

    Oracle Commerce Guided Search / Oracle Commerce Experience Manager - Broken Access Control

    Oracle Commerce Guided Search / Oracle Commerce Experience Manager 11.4.0 contains an information disclosure vulnerability caused by improper access control, letting low privileged attackers with network access via HTTP gain unauthorized access to critical data, exploit requires low privileged network access.

  • 7.0 /10 High
    CVE-2026-83231 No auth

    Oracle Fusion Middleware Helidon - Undefined

    Oracle Fusion Middleware Helidon 3.0.0-3.2.20 and 4.0.0-4.5.4 contains an undefined vulnerability in helidon-dbclient-mongodb, letting unauthenticated network attackers access and partially disrupt data, exploit requires network access via HTTP with high complexity.

  • 7.1 /10 High
    CVE-2026-83230 Auth required

    Oracle Siebel CRM - Broken Access Control

    Oracle Siebel CRM 17.0-26.7 contains an unauthorized access vulnerability caused by insufficient access control in Siebel Management Console, letting low privileged attackers with network access via HTTP access and modify critical data.

  • 7.5 /10 High
    CVE-2026-83228 No auth

    Oracle Siebel CRM Deployment - Denial of Service

    Oracle Siebel CRM Deployment 17.0-26.7 contains a denial of service caused by unauthenticated network access via TCP, letting remote attackers cause a hang or crash, exploit requires network access.

  • 7.5 /10 High
    CVE-2026-83227 Auth required

    Oracle Siebel CRM Integration - Remote Code Execution

    Oracle Siebel CRM Integration 17.0-26.7 contains a remote code execution caused by vulnerability in EAI component, letting low privileged attackers with network access via HTTP take over the system, exploit requires high attack complexity.

  • 7.5 /10 High
    CVE-2026-83226 Auth required

    Oracle Siebel CRM Deployment - Authentication Bypass

    Oracle Siebel CRM Deployment 17.0-26.7 contains a vulnerability in Server Infrastructure, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileges and network access.

  • 7.5 /10 High
    CVE-2026-83225 No auth

    Oracle Siebel CRM Deployment - Denial of Service

    Oracle Siebel CRM Deployment 17.0-26.7 contains a denial of service caused by unauthenticated network access via TCP, letting attackers cause a hang or crash, exploit requires network access.

  • 7.1 /10 High
    CVE-2026-83224 Auth required

    Oracle Siebel CRM Deployment - Broken Access Control

    Oracle Siebel CRM Deployment 17.0-26.7 contains an unauthorized access and partial denial of service vulnerability caused by insufficient access control in Server Infrastructure, letting low privileged attackers with network HTTP access compromise critical data and availability, exploit requires low privileges.

  • 7.5 /10 High
    CVE-2026-83223 Auth required

    Oracle Siebel CRM Deployment - Remote Code Execution

    Oracle Siebel CRM Deployment 17.0-26.7 contains a remote code execution caused by vulnerability in Siebel Remote component, letting low privileged attackers with network access via HTTP takeover the system, exploit requires low privileges and network access.

  • 7.5 /10 High
    CVE-2026-83222 No auth

    Oracle Siebel CRM Deployment - Denial of Service

    Oracle Siebel CRM Deployment 17.0-26.7 contains a denial of service caused by unauthenticated network access via multiple protocols, letting attackers cause a hang or crash, exploit requires network access.

  • 7.1 /10 High
    CVE-2026-83221 Auth required

    Oracle Siebel CRM Integration - Broken Access Control

    Oracle Siebel CRM Integration 17.0-26.7 contains a broken access control vulnerability caused by insufficient privilege checks in EAI component, letting low privileged attackers with network SOAP access gain unauthorized data access and modification.

  • 8.1 /10 High
    CVE-2026-83220

    Oracle Siebel CRM Integration - Broken Access Control

    Oracle Siebel CRM Integration 23.6-26.7 contains an unauthorized data access vulnerability caused by insufficient access control in Event Publish and Subscribe, letting unauthenticated attackers with physical network access modify or access critical data.

  • 7.1 /10 High
    CVE-2026-83219 Auth required

    Oracle Siebel CRM Deployment - Broken Access Control

    Oracle Siebel CRM Deployment 17.0-26.7 contains a broken access control vulnerability in Server Infrastructure, letting low privileged logged-in attackers create, delete, or modify critical data, exploit requires attacker login.

  • 7.4 /10 High
    CVE-2026-83218 No auth

    Oracle Siebel CRM Deployment - Broken Access Control

    Oracle Siebel CRM Deployment 17.0-26.7 contains a broken access control vulnerability in Server Infrastructure, letting unauthenticated attackers with network HTTP access modify or access critical data, exploit requires high attack complexity.

  • 7.1 /10 High
    CVE-2026-83217 Auth required

    Oracle Siebel CRM End User - Broken Access Control

    Oracle Siebel CRM End User 17.0-26.7 contains an unauthorized access vulnerability caused by insufficient access control in Open UI, letting low privileged attackers with network access via HTTP compromise data confidentiality and integrity, exploit requires low privilege network access.