Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

October 2026 CVE archive

Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.

Published in October 2026Materially updated (Critical / KEV)
Total records
24,591
Critical
3,297
High
7,976
Medium
7,646
Low
740
Severity not reported
4,932
In CISA KEV
191

Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-101458
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone...
high 8.2 —— 2026-10-202026-10-21
CVE-2026-101473
Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ...
high 8.1 —— 2026-10-202026-10-21
CVE-2026-101477
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analy...
high 7.8 —— 2026-10-202026-10-21
CVE-2026-101478
Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analy...
high 7.8 —— 2026-10-202026-10-21
CVE-2026-101479
Vulnerability in Oracle Secure Backup (component: Backup and Restore).
high 8.6 —— 2026-10-202026-10-21
CVE-2026-101494
Vulnerability in Oracle REST Data Services (component: Core).
high 7.7 —— 2026-10-202026-10-21
CVE-2026-101495
Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (compon...
high 8.8 —— 2026-10-202026-10-21
CVE-2026-101498
Vulnerability in Oracle Trusted Answer Search (component: PLSQL package).
high 8.1 —— 2026-10-202026-10-21
CVE-2026-101504
Vulnerability in Oracle Trusted Answer Search (component: Application expert UI)...
high 7.6 —— 2026-10-202026-10-21
CVE-2026-101505
Vulnerability in Oracle Trusted Answer Search (component: Application expert UI)...
high 8.7 —— 2026-10-202026-10-21
CVE-2026-101506
Vulnerability in Oracle Trusted Answer Search (component: Application expert UI)...
high 7.7 —— 2026-10-202026-10-21
CVE-2026-101518
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E...
high 8.8 —— 2026-10-202026-10-21
CVE-2026-101519
Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (comp...
high 7.2 —— 2026-10-202026-10-21
CVE-2026-101525
Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Ente...
high 8.8 —— 2026-10-202026-10-21
CVE-2026-101526
Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Ente...
high 8.8 —— 2026-10-202026-10-21
CVE-2026-101527
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E...
high 7.8 —— 2026-10-202026-10-21
CVE-2026-101531
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 7.5 —— 2026-10-202026-10-21
CVE-2026-101532
Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (comp...
high 7.2 —— 2026-10-202026-10-21
CVE-2026-101534
Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (comp...
high 8.5 —— 2026-10-202026-10-21
CVE-2026-101535
Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite...
high 7.5 —— 2026-10-202026-10-21
CVE-2026-101536
Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (...
high 7.5 —— 2026-10-202026-10-21
CVE-2026-101540
Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (compone...
high 7.7 —— 2026-10-202026-10-21
CVE-2026-101541
Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (compone...
high 7.7 —— 2026-10-202026-10-21
CVE-2026-101542
Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (compone...
high 8.8 —— 2026-10-202026-10-21
CVE-2026-101543
Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (compone...
high 7.5 —— 2026-10-202026-10-21
CVE-2026-101544
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (componen...
high 7.0 —— 2026-10-202026-10-21
CVE-2026-101545
Vulnerability in the Oracle Inventory Management product of Oracle E-Business Su...
high 7.0 —— 2026-10-202026-10-21
CVE-2026-101546
Vulnerability in the Oracle Materials Requirement Planning product of Oracle E-B...
high 7.5 —— 2026-10-202026-10-21
CVE-2026-101548
Vulnerability in Oracle Application Testing Suite (component: OpenScript).
high 7.0 —— 2026-10-202026-10-21
CVE-2026-101549
Vulnerability in Oracle Application Testing Suite (component: OpenScript).
high 7.8 —— 2026-10-202026-10-21
CVE-2026-101551
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Su...
high 7.5 —— 2026-10-202026-10-21
CVE-2026-101552
Vulnerability in the Oracle Application Object Library product of Oracle E-Busin...
high 7.5 —— 2026-10-202026-10-21
CVE-2026-101554
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (componen...
high 7.5 —— 2026-10-202026-10-21
CVE-2026-101555
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (componen...
high 7.5 —— 2026-10-202026-10-21
CVE-2026-101556
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (componen...
high 7.5 —— 2026-10-202026-10-21
CVE-2026-101560
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (compon...
high 7.1 —— 2026-10-202026-10-21
CVE-2026-101562
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:...
high 7.5 —— 2026-10-202026-10-21
CVE-2026-101566
Vulnerability in the Oracle Application Object Library product of Oracle E-Busin...
high 7.8 —— 2026-10-202026-10-21
CVE-2026-107435
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti...
high 7.1 —— 2026-10-212026-10-21
CVE-2026-110899
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti...
high 7.1 —— 2026-10-212026-10-21

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.