October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
23,689
Critical
3,236
High
7,696
Medium
7,353
Low
705
Severity not reported
4,699
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1426), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-87338 Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (compon... |
medium | 6.9 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87336 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
medium | 5.3 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-28 |
| CVE-2026-87335 Vulnerability in the Applications DBA product of Oracle E-Business Suite (compon... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87334 Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (comp... |
medium | 5.5 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87329 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87328 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 5.9 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87327 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 5.9 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87326 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 5.9 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87325 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 6.4 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87324 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 6.4 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87323 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 5.5 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87321 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 6.4 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-70173 Out-of-bounds read in Microsoft Windows Search Component allows an authorized at... |
medium | 5.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-28 |
| CVE-2026-70195 Use after free in Windows Ancillary Function Driver for WinSock allows an author... |
medium | 4.7 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-28 |
| CVE-2026-70201 Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny... |
medium | 5.5 | — | Microsoft / windows server 2012 | 2026-10-13 | 2026-10-28 |
| CVE-2026-87320 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 6.7 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87318 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 6.3 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87317 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 4.8 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87311 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
medium | 5.6 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2025-26926 Cross-Site Request Forgery (CSRF) vulnerability in Booknetic Booknetic booknetic... |
medium | 4.3 | — | — | 2025-02-25 | 2026-10-28 |
| CVE-2024-34319 A Server-Side Request Forgery (SSRF) in the serviceURL parameter of ProPhoenix L... |
medium | 6.5 | — | — | 2026-10-13 | 2026-10-28 |
| CVE-2024-30167 /cgi-bin/time.cgi in Atlona AT-OME-MS42 Matrix Switcher 1.1.2 allow remote authe... |
medium | 6.3 | — | — | 2026-05-08 | 2026-10-28 |
| CVE-2024-33722 SOPlanning 1.52.00 is vulnerable to SQL Injection by an authenticated user via p... |
medium | 6.3 | — | — | 2026-05-08 | 2026-10-28 |
| CVE-2024-33724 SOPlanning 1.52.00 is vulnerable to Cross Site Scripting (XSS) via the groupe_id... |
medium | 5.4 | — | — | 2026-05-08 | 2026-10-28 |
| CVE-2026-76305 In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a r... |
medium | 6.5 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-117606 NexoPOS through 6.3.0 contains a missing authorization vulnerability that allows... |
medium | 5.4 | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-115207 A flaw was found in GNU patch. |
medium | 5.5 | — | — | 2026-10-22 | 2026-10-28 |
| CVE-2026-115624 GROWI contains a missing authorization check vulnerability in its collaborative... |
medium | 5.3 | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-114714 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path tra... |
medium | 5.3 | — | — | 2026-10-22 | 2026-10-28 |
| CVE-2026-114657 Grav from 2.0.0 before 2.2.5 contains an information disclosure vulnerability th... |
medium | 5.7 | — | — | 2026-10-22 | 2026-10-28 |
| CVE-2026-114574 A security vulnerability has been detected in massCodeIO massCode 5.10. |
medium | 4.3 | — | — | 2026-10-22 | 2026-10-28 |
| CVE-2026-109848 GROWI contains an authorization bypass vulnerability in its tag update API and t... |
medium | 4.2 | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-105272 GROWI contains an authorization bypass vulnerability in its page viewing and com... |
medium | 4.2 | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-96641 Pillow is a Python imaging library. |
medium | 6.5 | — | Python / pillow | 2026-10-21 | 2026-10-28 |
| CVE-2026-114438 A flaw was found in the Update User Locale required action of the Keycloak ident... |
medium | 4.2 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-114264 A security flaw has been discovered in ProjectWorlds Advanced Library Management... |
medium | 4.7 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-114362 A flaw has been found in HarnessRouter up to 0.31.12. |
medium | 6.3 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-114376 A weakness has been identified in leomoon-studios wiki-go up to 1.9.1. |
medium | 6.3 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-114379 A flaw has been found in EKKOLearnAI ekko-studio up to 1.0.6. |
medium | 5.4 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-113798 Electron is a framework for writing cross-platform desktop applications using Ja... |
medium | 5.4 | — | — | 2026-10-21 | 2026-10-28 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.