October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,595
Critical
3,298
High
7,976
Medium
7,646
Low
740
Severity not reported
4,935
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-98419 In the Linux kernel, the following vulnerability has been resolved:
drop_monito... |
high | 7.0 | — | — | 2026-10-14 | 2026-10-24 |
| CVE-2026-98440 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
high | 7.0 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98441 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98381 In the Linux kernel, the following vulnerability has been resolved:
veth: manag... |
high | 7.8 | — | — | 2026-10-09 | 2026-10-24 |
| CVE-2026-98382 In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject... |
high | 7.8 | — | — | 2026-10-09 | 2026-10-24 |
| CVE-2026-98383 In the Linux kernel, the following vulnerability has been resolved:
bpf: Disall... |
high | 7.8 | — | — | 2026-10-09 | 2026-10-24 |
| CVE-2026-98385 In the Linux kernel, the following vulnerability has been resolved:
sched/cache... |
high | 7.8 | — | — | 2026-10-12 | 2026-10-24 |
| CVE-2026-98401 In the Linux kernel, the following vulnerability has been resolved:
net: iptunn... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-24 |
| CVE-2026-98405 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
high | 8.1 | — | — | 2026-10-14 | 2026-10-24 |
| CVE-2026-98374 In the Linux kernel, the following vulnerability has been resolved:
tcp: fix us... |
high | 8.8 | — | — | 2026-10-07 | 2026-10-24 |
| CVE-2026-98376 In the Linux kernel, the following vulnerability has been resolved:
bpf: Use ar... |
high | 7.8 | — | — | 2026-10-09 | 2026-10-24 |
| CVE-2026-98378 In the Linux kernel, the following vulnerability has been resolved:
bpf: Skip u... |
high | 7.8 | — | — | 2026-10-09 | 2026-10-24 |
| CVE-2026-42016 JFrog Artifactory Incorrect Authorization Vulnerability |
high | 8.8 | Listed | JFrog / Artifactory | 2026-07-27 | 2026-10-24 |
| CVE-2026-96185 Stack-based buffer overflow in Microsoft Exchange Online allows an authorized at... |
high | 7.5 | — | — | 2026-10-22 | 2026-10-24 |
| CVE-2026-94422 An incorrect implementation of message filtering in xdg-dbus-proxy versions befo... |
high | 8.8 | — | — | 2026-10-02 | 2026-10-24 |
| CVE-2026-91503 Vulnerability in the VPD component of Oracle Database Server. |
high | 8.1 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-91504 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-93640 A local privilege escalation vulnerability in the optional dnscache package of Z... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-91496 Vulnerability in the Workflow product of Oracle E-Business Suite (component: Wor... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-91499 Vulnerability in the RDBMS component of Oracle Database Server. |
high | 8.8 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-91502 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware... |
high | 7.3 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-91483 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-91484 Vulnerability in Oracle Java SE (component: Java plugin). |
high | 7.5 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-91473 Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (com... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-91465 Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-91458 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-91459 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-91460 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-101813 Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (comp... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-101692 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-101736 Vulnerability in the Primavera Unifier product of Oracle Construction and Engine... |
high | 7.4 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-101664 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-101685 Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of O... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-101686 Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of O... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-101635 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-101653 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-101654 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-101655 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-101656 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-24 |
| CVE-2026-91457 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-24 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.