October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,595
Critical
3,298
High
7,976
Medium
7,646
Low
740
Severity not reported
4,935
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-87408 Vulnerability in the Oracle Applications Framework product of Oracle E-Business... |
high | 8.7 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83379 Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusi... |
high | 8.7 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-116612 A flaw was found in GStreamer Editing Services (gst-editing-services). |
high | 7.8 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-101700 Vulnerability in the Oracle Application Object Library product of Oracle E-Busin... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101704 Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business S... |
high | 8.2 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101824 Vulnerability in the Document Management and Collaboration product of Oracle E-B... |
high | 8.7 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101648 Vulnerability in the Oracle Partner Management product of Oracle E-Business Suit... |
high | 8.4 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101665 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101672 Vulnerability in the Oracle Call Center Technology product of Oracle E-Business... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101684 Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of O... |
high | 8.3 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-116819 OpenPanel before 3.0.0 contains an information disclosure vulnerability that all... |
high | 8.5 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-116808 OpenPanel before 3.0.0 contains an sql injection vulnerability that allows authe... |
high | 7.2 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-82230 Uncontrolled recursion in the mcpack2pb component in Apache bRPC (version < 1.18... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-26 |
| CVE-2026-91632 Vulnerability in Oracle Essbase (component: Security). |
high | 7.7 | — | Oracle / essbase | 2026-10-20 | 2026-10-26 |
| CVE-2026-34486 Apache Tomcat Missing Encryption of Sensitive Data Vulnerability |
high | 7.5 | Listed | Apache / Tomcat | 2026-04-09 | 2026-10-26 |
| CVE-2026-34197 Apache ActiveMQ Improper Input Validation Vulnerability |
high | 8.8 | Listed | Apache / ActiveMQ | 2026-04-07 | 2026-10-26 |
| CVE-2025-57231 Path Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticate... |
high | 7.5 | — | — | 2026-09-10 | 2026-10-26 |
| CVE-2026-91625 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
high | 8.2 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91627 Vulnerability in the Oracle Communications Billing and Revenue Management produc... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91623 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
high | 7.4 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91610 Vulnerability in Oracle REST Data Services (component: General). |
high | 8.8 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91608 Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component:... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91604 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91597 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
high | 8.3 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91579 Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component:... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91568 Vulnerability in the RDBMS component of Oracle Database Server. |
high | 7.7 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91573 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
high | 8.2 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91563 Vulnerability in the Oracle OLAP component of Oracle Database Server. |
high | 8.8 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91557 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
high | 7.0 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91550 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91552 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91546 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91549 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91542 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91545 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91537 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utilit... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91539 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91534 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
high | 8.6 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91535 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91532 Vulnerability in the Oracle Applications Manager product of Oracle E-Business Su... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-26 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.