High CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10203
Critical
1875
CISA KEV
79
Public PoC
367

Most common types

  • Broken Access Control 1267
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

5 Oct Critical Other 18 Oct

Source: public CVE records (NVD, CISA KEV) · last published 18 Oct 2026

High CVEs

Newest first · severity as published by the vendor or NVD · page 441 of 556

  • 7.2 /10 High
    CVE-2026-83016 Auth required

    Oracle PeopleSoft PeopleTools - Authentication Bypass

    Oracle PeopleSoft PeopleTools 8.61-8.63 contains a takeover vulnerability caused by an unspecified issue in SQR component, letting high privileged attackers with logon and user interaction take over PeopleSoft Enterprise PeopleTools, exploit requires human interaction from a user other than the attacker.

  • 7.0 /10 High
    CVE-2026-83015 Auth required

    Oracle PeopleSoft PeopleTools - Privilege Escalation

    Oracle PeopleSoft PeopleTools 8.61-8.63 contains a privilege escalation caused by a vulnerability in Cube Manager, letting low privileged attackers with logon take over PeopleSoft Enterprise PeopleTools, exploit requires local access with credentials.

  • 8.1 /10 High
    CVE-2026-83014 Auth required

    Oracle PeopleSoft PeopleTools - Broken Access Control

    Oracle PeopleSoft PeopleTools 8.61-8.63 contains a broken access control vulnerability in Cube Manager, letting low privileged attackers with network HTTP access modify critical data or cause denial of service, exploit requires low privilege network access.

  • 8.8 /10 High
    CVE-2026-83013 Auth required

    Oracle WebCenter Enterprise Capture - Remote Code Execution

    Oracle WebCenter Enterprise Capture 12.2.1.4.0 and 14.1.2.0.0 contains a remote code execution caused by a vulnerability in the Client Bundle, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileges.

  • 7.7 /10 High
    CVE-2026-83012 Auth required

    Oracle WebCenter Enterprise Capture - Broken Access Control

    Oracle WebCenter Enterprise Capture 12.2.1.4.0 and 14.1.2.0.0 contains an unauthorized access vulnerability caused by insufficient access control in Client Bundle, letting low privileged attackers with network access via HTTP access critical data, exploit requires low privileged network access.

  • 8.1 /10 High
    CVE-2026-83011 No auth

    Oracle Platform Security for Java - Authentication Bypass

    Oracle Platform Security for Java 12.2.1.4.0 and 14.1.2.0.0 contains a vulnerability in Centralized Thirdparty Jars, letting unauthenticated attackers with network access via HTTP take over the system, exploit requires high attack complexity.

  • 8.1 /10 High
    CVE-2026-83010 Auth required

    Oracle WebCenter Enterprise Capture - Broken Access Control

    Oracle WebCenter Enterprise Capture 12.2.1.4.0 and 14.1.2.0.0 contain a broken access control vulnerability caused by improper authorization in Client Bundle, letting high privileged attackers with network access via HTTP and user interaction modify or access critical data, exploit requires user interaction from a person other than the attacker.

  • 8.8 /10 High
    CVE-2026-83009 Auth required

    Oracle WebCenter Enterprise Capture - Remote Code Execution

    Oracle WebCenter Enterprise Capture 12.2.1.4.0 and 14.1.2.0.0 contains a remote code execution caused by a vulnerability in the Client Bundle, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileges.

  • 8.8 /10 High
    CVE-2026-83008 Auth required

    Oracle WebCenter Enterprise Capture - Remote Code Execution

    Oracle WebCenter Enterprise Capture 12.2.1.4.0 and 14.1.2.0.0 contains a remote code execution caused by network access via T3 and IIOP protocols, letting low privileged attackers fully compromise the system, exploit requires network access with low privileges.

  • 8.5 /10 High
    CVE-2026-83007 Auth required

    Oracle WebCenter Enterprise Capture - Broken Access Control

    Oracle WebCenter Enterprise Capture 12.2.1.4.0 and 14.1.2.0.0 contains an unauthorized data access and modification vulnerability caused by insufficient access controls in Client Bundle, letting low privileged attackers with network access via HTTP compromise critical data, exploit requires low privileged network access.

  • 8.8 /10 High
    CVE-2026-83005 Auth required

    Oracle WebCenter Enterprise Capture - Remote Code Execution

    Oracle WebCenter Enterprise Capture 12.2.1.4.0 and 14.1.2.0.0 contains a remote code execution caused by a vulnerability in the Client Bundle, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privilege network access.

  • 7.2 /10 High
    CVE-2026-83004 Auth required

    Oracle WebCenter Enterprise Capture - Broken Access Control

    Oracle WebCenter Enterprise Capture 12.2.1.4.0 and 14.1.2.0.0 contains a broken access control vulnerability caused by insufficient authorization checks in Client Bundle, letting low privileged attackers with logon and user interaction modify or access critical data, exploit requires user interaction from another person.

  • 8.5 /10 High
    CVE-2026-83003 Auth required

    Oracle WebCenter Enterprise Capture - Broken Access Control

    Oracle WebCenter Enterprise Capture 12.2.1.4.0 and 14.1.2.0.0 contains a broken access control vulnerability caused by improper authorization in Client Bundle via SOAP, letting low privileged attackers with network access gain unauthorized data access and modification.

  • 8.5 /10 High
    CVE-2026-83002 Auth required

    Oracle Access Manager - Authentication Bypass

    Oracle Access Manager 12.2.1.4.0 and 14.1.2.1.0 contain an authentication bypass caused by a vulnerability in the Authentication Engine, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileges and network access.

  • 7.8 /10 High
    CVE-2026-82996 Auth required

    Oracle Platform Security for Java - Privilege Escalation

    Oracle Platform Security for Java 12.2.1.4.0 and 14.1.2.0.0 contains a privilege escalation vulnerability caused by insufficient access control in Centralized Thirdparty Jars, letting low privileged logged-in attackers take over the system.