High CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10425
Critical
1916
CISA KEV
79
Public PoC
384

Most common types

  • Broken Access Control 1290
  • Privilege Escalation 1190
  • Remote Code Execution 1111
  • Authentication Bypass 835
  • Denial of Service 799

Published per day, last 14 days

7 Oct Critical Other 20 Oct

Source: public CVE records (NVD, CISA KEV) · last published 20 Oct 2026

High CVEs

Newest first · severity as published by the vendor or NVD · page 445 of 568

  • 8.2 /10 High
    CVE-2026-83181 No auth

    Oracle Siebel CRM Development - Broken Access Control

    Oracle Siebel CRM Development 17.0-26.7 contains an unauthorized access vulnerability caused by improper access control in Workspaces, letting unauthenticated network attackers access critical data and cause partial denial of service, exploit requires network access via HTTP.

  • 8.8 /10 High
    CVE-2026-83180 Auth required

    Oracle Siebel CRM Deployment - Remote Code Execution

    Oracle Siebel CRM Deployment 17.0-26.7 contains a remote code execution caused by an easily exploitable vulnerability in Server Infrastructure, letting low privileged attackers with network access via HTTP take over the system, exploit requires low privileges.

  • 7.1 /10 High
    CVE-2026-83179 Auth required

    Oracle Oracle Common Applications Calendar - Broken Access Control

    Oracle E-Business Suite Oracle Common Applications Calendar 12.2.3-12.2.15 contains a broken access control vulnerability caused by improper authorization checks, letting low privileged attackers with network access via HTTP create, modify, delete data, or cause partial denial of service.

  • 8.0 /10 High
    CVE-2026-83178 Auth required

    Oracle Application Object Library - Authentication Bypass

    Oracle Application Object Library 12.2.3-12.2.15 contains a vulnerability caused by an unspecified issue in the core component, letting high privileged attackers with network access via HTTP take over the application, exploit requires high privileges.

  • 8.1 /10 High
    CVE-2026-83177 Auth required

    Oracle One-to-One Fulfillment - Broken Access Control

    Oracle One-to-One Fulfillment 12.2.3-12.2.15 contains a broken access control vulnerability in Documents component, letting low privileged attackers with network access via HTTP create, delete, or modify critical data, exploit requires low privilege network access.

  • 7.2 /10 High
    CVE-2026-83176 Auth required

    Oracle E-Business Suite Oracle Common Applications - Authentication Bypass

    Oracle E-Business Suite Oracle Common Applications 12.2.3-12.2.15 contains a vulnerability in CRM User Management Framework, letting high privileged attackers with network access via HTTP take over the application, exploit requires high privileges.

  • 8.1 /10 High
    CVE-2026-83174 Auth required

    Oracle CRM Technical Foundation - Broken Access Control

    Oracle CRM Technical Foundation 12.2.3-12.2.15 contains a broken access control vulnerability caused by insufficient privilege checks in Application Framework, letting low privileged attackers with network access via HTTP modify or access critical data, exploit requires low privileged network access.

  • 7.1 /10 High
    CVE-2026-83173 Auth required

    Oracle One-to-One Fulfillment - Broken Access Control

    Oracle One-to-One Fulfillment 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by insufficient access controls in Documents component, letting low privileged attackers with network access via HTTP access critical data and cause partial denial of service.

  • 8.5 /10 High
    CVE-2026-83172 Auth required

    Oracle Sales Online - Broken Access Control

    Oracle Sales Online 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by insufficient access control in OSO Other component, letting low privileged attackers with network access via HTTP compromise critical data and modify some data, exploit requires low privileged network access.

  • 7.1 /10 High
    CVE-2026-83171 Auth required

    Oracle One-to-One Fulfillment - Unauthorized Access & Partial Denial of Service

    Oracle One-to-One Fulfillment 12.2.3-12.2.15 contains an unauthorized access and partial denial of service vulnerability caused by an unspecified issue in Documents component, letting low privileged attackers with network access via HTTP compromise critical data and availability, exploit requires network access with low privileges.

  • 8.0 /10 High
    CVE-2026-83170

    Oracle One-to-One Fulfillment - Remote Code Execution

    Oracle One-to-One Fulfillment 12.2.3-12.2.15 contains a remote takeover vulnerability caused by insufficient protection of the physical communication segment, letting low privileged attackers compromise the system remotely, exploit requires access to the physical communication segment.

  • 8.1 /10 High
    CVE-2026-83169 No auth

    Oracle One-to-One Fulfillment - Remote Code Execution

    Oracle One-to-One Fulfillment 12.2.3-12.2.15 contains a remote code execution vulnerability caused by Java Server Issues, letting unauthenticated attackers with network access via HTTP take over the system, exploit requires difficult conditions.

  • 8.8 /10 High
    CVE-2026-83168 Auth required

    Oracle Oracle Applications Manager - Remote Code Execution

    Oracle E-Business Suite Oracle Applications Manager 12.2.3-12.2.15 contains a remote code execution caused by vulnerability in Oracle Diagnostics Interfaces, letting low privileged attackers with network access via HTTPS take over the application, exploit requires network access via HTTPS.

  • 7.5 /10 High
    CVE-2026-83167 No auth

    Oracle Application Object Library - Broken Access Control

    Oracle Application Object Library 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by improper access control, letting unauthenticated attackers with network HTTP access compromise critical data, exploit requires network access via HTTP.

  • 7.7 /10 High
    CVE-2026-83166 Auth required

    Oracle Customer Interaction History - Broken Access Control

    Oracle Customer Interaction History 12.2.3-12.2.15 contains an unauthorized access vulnerability caused by insufficient access controls in Outcome-Result component, letting low privileged attackers with network access via HTTP access critical data, exploit requires low privilege network access.