High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10203
- Critical
- 1875
- CISA KEV
- 79
- Public PoC
- 367
Most common types
- Broken Access Control 1267
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 431 of 556
- 7.8 /10 HighCVE-2026-83216 Auth required
Oracle Siebel CRM Deployment - Privilege Escalation
Oracle Siebel CRM Deployment 17.0-26.7 contains a privilege escalation vulnerability in Server Infrastructure, letting low privileged logged-in attackers take over Siebel CRM Deployment, exploit requires attacker login.
- 8.2 /10 HighCVE-2026-83215 No auth
Oracle Siebel CRM Deployment - Broken Access Control
Oracle Siebel CRM Deployment 17.0-26.7 contains an unauthorized access vulnerability caused by improper access control in Server Infrastructure, letting unauthenticated attackers with network HTTP access compromise data confidentiality and integrity.
- 7.8 /10 HighCVE-2026-83214 Auth required
Oracle Siebel CRM Deployment - Remote Code Execution
Oracle Siebel CRM Deployment 17.0-26.7 contains a remote code execution caused by insufficient privilege checks in Server Infrastructure, letting low privileged logged-in attackers take over the system, exploit requires attacker login.
- 7.5 /10 HighCVE-2026-83213 No auth
Oracle Siebel CRM End User - Broken Access Control
Oracle Siebel CRM End User 17.0-26.7 contains an unauthorized access vulnerability caused by improper access control in Reports component, letting unauthenticated attackers with network access via HTTP access critical data, exploit requires network access.
- 8.8 /10 HighCVE-2026-83212 Auth required
Oracle Siebel Apps - Self Service - Remote Code Execution
Oracle Siebel CRM Siebel Apps - Self Service 17.0-26.7 contains a remote code execution caused by an easily exploitable vulnerability in Helpdesk/Training component, letting low privileged attackers with network access takeover the application, exploit requires low privilege network access.
- 7.8 /10 HighCVE-2026-83211 Auth required
Oracle Siebel CRM Deployment - Privilege Escalation
Oracle Siebel CRM Deployment 17.0-26.7 contains a privilege escalation vulnerability in Server Infrastructure, letting low privileged logged-in attackers take over Siebel CRM Deployment, exploit requires attacker logon.
- 8.8 /10 HighCVE-2026-83210 Auth required
Oracle Siebel CRM Deployment - SQL Injection
Oracle Siebel CRM Deployment 17.0-26.7 contains a SQL injection caused by improper input validation in Server Infrastructure, letting low privileged attackers with network access take over the system, exploit requires low privilege network access.
- 8.8 /10 HighCVE-2026-83209 Auth required
Oracle Siebel CRM Development - Remote Code Execution
Oracle Siebel CRM Development 17.0-26.7 contains a remote code execution caused by vulnerability in Workflow component, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileges.
- 8.8 /10 HighCVE-2026-83208 Auth required
Oracle Siebel CRM Deployment - SQL Injection
Oracle Siebel CRM Deployment 17.0-26.7 contains a SQL injection caused by improper input validation in Migration component, letting low privileged attackers with network access take over the system, exploit requires low privilege network access.
- 7.6 /10 HighCVE-2026-83207 Auth required
Oracle Siebel CRM - Broken Access Control
Oracle Siebel CRM 17.0-26.7 contains a broken access control vulnerability caused by improper authorization in Integration - Scripting, letting low privileged attackers with network access via HTTP cause denial of service and unauthorized data read/write.
- 7.1 /10 HighCVE-2026-83206 Auth required
Oracle Banking Corporate Lending Process Management - Authentication Bypass
Oracle Banking Corporate Lending Process Management 14.5.0.0.0-14.9.0.0.0 contains an authentication bypass caused by a vulnerability in the Base component, letting low privileged attackers with network access via HTTP and user interaction takeover the system.
- 8.8 /10 HighCVE-2026-83205 Auth required
Oracle Applications Framework - Remote Code Execution
Oracle Applications Framework 12.2.3-12.2.15 contains a remote code execution caused by a vulnerability in the Personalization component, letting low privileged attackers with network access via HTTP take over the framework, exploit requires low privileges.
- 7.5 /10 HighCVE-2026-83204 Auth required
Oracle Oracle Sourcing - Authentication Bypass
Oracle E-Business Suite Oracle Sourcing 12.2.3-12.2.15 contains a takeover vulnerability caused by an internal operations issue, letting low privileged attackers with network access via HTTP fully compromise Oracle Sourcing, exploit requires low privileges and network access.
- 8.6 /10 HighCVE-2026-83203 No auth
Oracle Siebel CRM End User - Broken Access Control
Oracle Siebel CRM End User 17.0-26.7 contains an unauthenticated access vulnerability in Open UI, letting remote attackers compromise data confidentiality, integrity, and availability, exploit requires network access via HTTP.
- 8.8 /10 HighCVE-2026-83199 Auth required
Oracle Siebel CRM Deployment - Remote Code Execution
Oracle Siebel CRM Deployment 17.0-26.7 contains a remote code execution caused by a vulnerability in Server Infrastructure, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privilege network access.