High CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

High CVEs

Newest first · severity as published by the vendor or NVD · page 437 of 556

  • 7.5 /10 High
    CVE-2026-83114 Auth required

    Oracle Oracle Quality - Authentication Bypass

    Oracle E-Business Suite Oracle Quality 12.2.3-12.2.15 contains a takeover vulnerability caused by an internal operations issue, letting low privileged attackers with network access via HTTP fully compromise Oracle Quality, exploit requires low privileges and network access.

  • 7.1 /10 High
    CVE-2026-83113 Auth required

    Oracle E-Business Suite Oracle Quality - Broken Access Control

    Oracle E-Business Suite Oracle Quality 12.2.3-12.2.15 contains a broken access control caused by insufficient privilege checks in Internal Operations, letting low privileged attackers with network access via HTTP gain unauthorized access and modify critical data.

  • 7.2 /10 High
    CVE-2026-83112 Auth required

    Oracle Lease and Finance Management - Remote Code Execution

    Oracle Lease and Finance Management 12.2.7-12.2.15 contains a remote code execution caused by an easily exploitable vulnerability in Internal Operations, letting high privileged attackers with network access via HTTP take over the system, exploit requires high privileges.

  • 7.1 /10 High
    CVE-2026-83111 Auth required

    Oracle E-Business Suite Oracle Partner Management - Broken Access Control

    Oracle E-Business Suite Oracle Partner Management 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by internal operations flaws, letting low privileged attackers with network access via HTTP compromise data confidentiality and integrity, exploit requires network access with low privileges.

  • 7.5 /10 High
    CVE-2026-83110 No auth

    Oracle E-Business Suite Oracle Marketing - Broken Access Control

    Oracle E-Business Suite Oracle Marketing 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by insufficient access controls in Audience component, letting unauthenticated attackers with network access via HTTP access critical data, exploit requires network access.

  • 7.5 /10 High
    CVE-2026-83106 Auth required

    Oracle Oracle Forms - Remote Code Execution

    Oracle Fusion Middleware Oracle Forms 12.2.1.19.0 and 14.1.2.0.0 contain a remote code execution caused by vulnerability in Forms Services, letting low privileged attackers with network access via HTTP take over Oracle Forms, exploit requires network access with low privileges.

  • 7.4 /10 High
    CVE-2026-83102 No auth

    Oracle Oracle Forms - Broken Access Control

    Oracle Fusion Middleware Oracle Forms 12.2.1.19.0 and 14.1.2.0.0 contains a broken access control vulnerability in Forms Services, letting unauthenticated attackers with network HTTP access modify or access critical data, exploit requires network access via HTTP.

  • 8.1 /10 High
    CVE-2026-83101 No auth

    Oracle Oracle Forms - Remote Code Execution

    Oracle Fusion Middleware Oracle Forms 12.2.1.19.0 and 14.1.2.0.0 contain a remote code execution caused by vulnerability in Forms Services, letting unauthenticated attackers with network access via HTTP take over Oracle Forms, exploit requires high attack complexity.

  • 7.9 /10 High
    CVE-2026-83096 Auth required

    Oracle Oracle Forms - Authorization Bypass & Partial Denial of Service

    Oracle Fusion Middleware Oracle Forms 12.2.1.19.0 and 14.1.2.0.0 contains a vulnerability in Forms Services, C/S, Charmode, letting low privileged attackers with network access via HTTP and user interaction cause unauthorized data access, modification, and partial denial of service.

  • 8.6 /10 High
    CVE-2026-83093 No auth

    Oracle Oracle Forms - Information Disclosure

    Oracle Fusion Middleware Oracle Forms 12.2.1.19.0 and 14.1.2.0.0 contain an information disclosure vulnerability caused by unauthenticated network access via HTTP, letting attackers gain unauthorized access to critical or all accessible Oracle Forms data, exploit requires network access.

  • 7.1 /10 High
    CVE-2026-83092 Auth required

    Oracle E-Business Suite Oracle Field Service - Broken Access Control

    Oracle E-Business Suite Oracle Field Service 12.2.3-12.2.15 contains a broken access control vulnerability in Internal Operations, letting low privileged attackers with network HTTP access create, modify, delete data, or cause partial denial of service.

  • 7.6 /10 High
    CVE-2026-83091 Auth required

    Oracle Oracle Field Service - Broken Access Control

    Oracle E-Business Suite Oracle Field Service 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by insufficient access controls in Internal Operations, letting low privileged attackers with network access via HTTP access and modify critical data and cause partial denial of service.

  • 8.8 /10 High
    CVE-2026-83090 Auth required

    Oracle Oracle Spares Management - Remote Code Execution

    Oracle E-Business Suite Oracle Spares Management 12.2.3-12.2.15 contains a remote code execution caused by an easily exploitable vulnerability in Internal Operations, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileged network access.

  • 8.1 /10 High
    CVE-2026-83089 Auth required

    Oracle Oracle Alert - Broken Access Control

    Oracle E-Business Suite Oracle Alert 12.2.3-12.2.15 contains a broken access control vulnerability in Internal Operations, letting low privileged attackers with network access via HTTP create, delete, or modify critical data, exploit requires low privilege network access.

  • 7.7 /10 High
    CVE-2026-83088 Auth required

    Oracle Database Server - Denial of Service

    Oracle Database Server 23.4.0-23.26.3 contains a denial of service caused by a vulnerability in the RDBMS component, letting low privileged authenticated users with network access via Oracle Net cause a hang or crash, exploit requires authenticated user privilege.