October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,591
Critical
3,297
High
7,976
Medium
7,646
Low
740
Severity not reported
4,932
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-101649 Vulnerability in the Oracle Partner Management product of Oracle E-Business Suit... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101650 Vulnerability in the Oracle Partner Management product of Oracle E-Business Suit... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101636 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su... |
high | 7.4 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101638 Vulnerability in the Applications DBA product of Oracle E-Business Suite (compon... |
high | 7.3 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101641 Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (c... |
high | 7.6 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101642 Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (c... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101468 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101464 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101466 Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (comp... |
high | 7.2 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-70303 Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate p... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83756 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker t... |
high | 7.8 | — | Microsoft / windows 10 21h2 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83761 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker t... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83768 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to el... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-21 |
| CVE-2026-76481 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-100072 In the Linux kernel, the following vulnerability has been resolved:
ACPI: platf... |
high | 7.8 | — | Linux / linux kernel | 2026-09-25 | 2026-10-21 |
| CVE-2026-87402 Vulnerability in the Applications DBA product of Oracle E-Business Suite (compon... |
high | 7.3 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-87403 Vulnerability in the Applications DBA product of Oracle E-Business Suite (compon... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-87404 Vulnerability in the Pasta product of Oracle E-Business Suite (component: Printi... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-87417 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-87419 Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (com... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-87420 Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (com... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-87421 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91377 Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (compon... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101594 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101596 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101598 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101599 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101602 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
high | 8.0 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101603 Vulnerability in the Oracle Communications Unified Inventory Management product... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101604 Vulnerability in the Oracle Communications Unified Inventory Management product... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101579 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel... |
high | 7.2 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101585 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel... |
high | 7.2 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-102499 The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Cal... |
high | 7.7 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-105262 The Falang multilanguage for WordPress plugin before 1.4.6 does not perform a ca... |
high | 8.0 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-107127 The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not validat... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-107237 The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.28 does n... |
high | 8.2 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-107506 The Simple Banner WordPress plugin before 3.3.3 does not correctly limit the cap... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-109147 The WP Booking System WordPress plugin before 2.1.0.3 does not validate and esca... |
high | 7.1 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-110523 The WP User Manager WordPress plugin before 2.9.26 does not keep its paid-regist... |
high | 8.1 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-111574 The Redirection for Contact Form 7 WordPress plugin before 3.2.12 does not sanit... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.