October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
23,614
Critical
3,231
High
7,678
Medium
7,323
Low
701
Severity not reported
4,681
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1426), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-83382 Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (c... |
medium | 4.3 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83383 Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (compon... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83384 Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (compon... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83385 Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (compon... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83386 Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (compon... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83387 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... |
medium | 5.9 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83389 Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (compon... |
medium | 5.4 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83390 Vulnerability in the Oracle Applications Manager product of Oracle E-Business Su... |
medium | 4.2 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83374 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... |
medium | 5.9 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83375 Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle... |
medium | 6.0 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83377 Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (compon... |
medium | 5.4 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83378 Vulnerability in Oracle Java SE (component: Compiler). |
medium | 4.8 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83380 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... |
medium | 5.3 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83381 Vulnerability in Oracle Java SE (component: Security). |
medium | 4.8 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83371 Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (compon... |
medium | 5.4 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-117541 svg-sanitizer from 0.11.0 before 1.1.0 contains an uncaught exception vulnerabil... |
medium | 5.3 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-116196 Rclone before v1.75.2 contains a credential exposure vulnerability in the b2 bac... |
medium | 5.3 | — | Rclone / rclone | 2026-10-25 | 2026-10-27 |
| CVE-2026-116195 Rclone before 1.75.2 contains a path traversal vulnerability in the local backen... |
medium | 6.1 | — | Rclone / rclone | 2026-10-25 | 2026-10-27 |
| CVE-2026-116192 rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerabil... |
medium | 5.9 | — | Rclone / rclone | 2026-10-25 | 2026-10-27 |
| CVE-2026-12664 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2... |
medium | 6.8 | — | Gitlab / gitlab | 2026-10-22 | 2026-10-27 |
| CVE-2026-100753 Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Real Estate... |
medium | 6.1 | — | Ordasoft / real estate manager | 2026-09-28 | 2026-10-27 |
| CVE-2026-101109 Joomla Extension - ordasoft.com - Reflected Cross-Site Scripting in Vehicle Mana... |
medium | 6.1 | — | Ordasoft / vehicle manager | 2026-09-28 | 2026-10-27 |
| CVE-2026-91645 Vulnerability in Oracle Essbase (component: Security). |
medium | 5.3 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91646 Vulnerability in Oracle Essbase (component: Security). |
medium | 5.6 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91634 Vulnerability in Oracle Essbase (component: Security). |
medium | 5.3 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91640 Vulnerability in Oracle Essbase (component: Security). |
medium | 5.0 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91641 Vulnerability in Oracle Essbase (component: Security). |
medium | 5.0 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91643 Vulnerability in Oracle Essbase (component: Java Based Agent). |
medium | 5.3 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-70860 Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product... |
medium | 5.9 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83139 Vulnerability in the Oracle Order Management product of Oracle E-Business Suite... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83358 Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (co... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-60746 Vulnerability in the Oracle Order Management product of Oracle E-Business Suite... |
medium | 5.9 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-60876 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
medium | 4.2 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-60453 Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Wind... |
medium | 5.3 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-91767 php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the lengt... |
medium | 6.5 | — | Php / php | 2026-09-25 | 2026-10-27 |
| CVE-2026-40507 OpenEMR before 8.3.0 contains a reflected cross-site scripting vulnerability in... |
medium | 6.1 | — | — | 2026-08-19 | 2026-10-27 |
| CVE-2026-40508 OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability in the... |
medium | 5.4 | — | — | 2026-08-19 | 2026-10-27 |
| CVE-2026-40509 OpenEMR before 8.3.0 contains a cross-site request forgery vulnerability in the... |
medium | 4.3 | — | — | 2026-08-19 | 2026-10-27 |
| CVE-2026-113724 virtualenv is a tool for creating isolated virtual python environments. |
medium | 4.5 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101857 Vulnerability in the Oracle Order Management product of Oracle E-Business Suite... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-27 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.