High CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

High CVEs

Newest first · severity as published by the vendor or NVD · page 438 of 556

  • 8.2 /10 High
    CVE-2026-83087 Auth required

    Oracle Siebel CRM - Broken Access Control

    Oracle Siebel CRM Cloud Applications 22.3-26.7 contains a broken access control vulnerability in Siebel Cloud Manager, letting low privileged attackers with network access via HTTP create, delete, or modify critical data, exploit requires network access with low privileges.

  • 8.8 /10 High
    CVE-2026-83086 Auth required

    Oracle Siebel CRM - Remote Code Execution

    Oracle Siebel CRM Cloud Applications 22.3-26.7 contains a remote code execution caused by an easily exploitable vulnerability in Siebel Cloud Manager, letting low privileged attackers with network access takeover the application, exploit requires network access via HTTP.

  • 8.2 /10 High
    CVE-2026-83085

    Oracle Siebel CRM - Broken Access Control

    Oracle Siebel CRM Cloud Applications 22.3-26.7 contains an unauthorized access vulnerability caused by insufficient protection of the physical communication segment in Siebel Cloud Manager, letting low privileged attackers with physical network access compromise data confidentiality, integrity, and availability.

  • 7.7 /10 High
    CVE-2026-83084 Auth required

    Oracle Oracle Marketing - Broken Access Control

    Oracle E-Business Suite Oracle Marketing 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by insufficient access control in Audience component, letting low privileged attackers with network access via HTTP access critical data, exploit requires low privilege network access.

  • 8.5 /10 High
    CVE-2026-83083 Auth required

    Oracle Marketing - Broken Access Control

    Oracle Marketing in Oracle E-Business Suite 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by insufficient access controls in Audience component, letting low privileged attackers with network access via HTTP compromise data confidentiality and integrity, exploit requires low privileged network access.

  • 7.2 /10 High
    CVE-2026-83082 Auth required

    Oracle E-Business Suite Oracle Marketing - Remote Code Execution

    Oracle E-Business Suite Oracle Marketing 12.2.3-12.2.15 contains a remote code execution caused by an easily exploitable vulnerability in Audience component, letting high privileged attackers with network access via HTTP take over Oracle Marketing, exploit requires high privileges.

  • 8.0 /10 High
    CVE-2026-83081

    Oracle Financial Services Applications Oracle Banking Corporate Lending - Broken Access Control

    Oracle Financial Services Applications Oracle Banking Corporate Lending 14.5.0.0.0-14.9.0.0.0 contains a data tampering and information disclosure vulnerability caused by unauthorized access via physical communication segment, letting unauthenticated attackers create, delete, or modify critical data, exploit requires physical access to communication segment.

  • 7.1 /10 High
    CVE-2026-83080 Auth required

    Oracle Banking Branch - Authentication Bypass

    Oracle Banking Branch 14.5.0.0.0-14.9.0.0.0 contains an undefined vulnerability in Reports component, letting low privileged attackers with network access via HTTP and user interaction takeover the system.

  • 7.9 /10 High
    CVE-2026-83079 Auth required

    Oracle Siebel CRM - Broken Access Control

    Oracle Siebel CRM Cloud Applications 22.3-26.7 contains a broken access control vulnerability in Siebel Cloud Manager, letting high privileged attackers with logon compromise critical data integrity and confidentiality, exploit requires high privilege logon.

  • 8.2 /10 High
    CVE-2026-83078 No auth

    Oracle Siebel CRM - Broken Access Control

    Oracle Siebel CRM Cloud Applications 22.3-26.7 contains an unauthorized access vulnerability in Siebel Cloud Manager, letting unauthenticated attackers with HTTP network access compromise data confidentiality and integrity.

  • 7.5 /10 High
    CVE-2026-83075 No auth

    Oracle Siebel CRM - Authentication Bypass

    Oracle Siebel CRM Cloud Applications 22.3-26.7 contains an unauthorized access vulnerability caused by insufficient authentication in Siebel Cloud Manager, letting unauthenticated attackers with network access via HTTP access critical data, exploit requires network access.

  • 8.6 /10 High
    CVE-2026-83074

    Oracle Siebel CRM - Broken Access Control

    Oracle Siebel CRM Cloud Applications 22.3-26.7 contains an unauthorized access vulnerability caused by improper SSH access control in Siebel Cloud Manager, letting unauthenticated attackers with network access compromise critical data, exploit requires network SSH access.

  • 8.1 /10 High
    CVE-2026-83073

    Oracle Siebel CRM Siebel CRM Cloud Applications - Broken Access Control

    Oracle Siebel CRM Siebel CRM Cloud Applications 22.3-26.7 contains a broken access control vulnerability in Siebel Cloud Manager, letting unauthenticated attackers with physical network access create, delete, or modify critical data, exploit requires physical communication segment access.

  • 8.1 /10 High
    CVE-2026-83072 Auth required

    Oracle Applications Framework - Broken Access Control

    Oracle Applications Framework 12.2.3-12.2.15 contains a broken access control vulnerability caused by improper authorization in Search Bean component, letting low privileged attackers with network access via HTTP modify or access critical data.

  • 7.8 /10 High
    CVE-2026-83071 Auth required

    Oracle Business Intelligence Enterprise Edition - Remote Code Execution

    Oracle Business Intelligence Enterprise Edition 8.2.0.0.0 and 26.01.0.0.0 contains a remote code execution caused by a vulnerability in the Machine Learning component, letting low privileged attackers with logon to the infrastructure take over the system, exploit requires attacker to have logon access.