October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
23,281
Critical
3,225
High
7,606
Medium
7,217
Low
653
Severity not reported
4,580
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1426), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-91383 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 6.6 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91384 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91385 Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Ed... |
medium | 5.4 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91386 Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD... |
medium | 6.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91387 Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component... |
medium | 5.4 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91388 Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component... |
medium | 4.7 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91389 Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component... |
medium | 5.4 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91390 Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component... |
medium | 5.4 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101589 Vulnerability in the Oracle Utilities Network Management System product of Oracl... |
medium | 5.3 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101591 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
medium | 4.3 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101592 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
medium | 5.4 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101595 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
medium | 5.4 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101597 Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems... |
medium | 5.3 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101601 Vulnerability in Oracle GoldenGate (component: Vendor Access Module). |
medium | 5.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101605 Vulnerability in the Oracle Utilities Network Management System product of Oracl... |
medium | 5.3 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101606 Vulnerability in the Oracle Communications Billing and Revenue Management produc... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101607 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 4.9 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101608 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101609 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 4.4 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101610 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 4.9 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101611 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 4.4 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101612 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 4.0 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101613 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 4.9 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101614 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 4.9 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101615 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 4.4 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101616 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101617 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 4.9 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101580 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel... |
medium | 5.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101582 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel... |
medium | 5.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101586 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel... |
medium | 5.3 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101588 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Web... |
medium | 5.3 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-100145 The Synchrony Financing WordPress plugin before 1.1.2 does not properly authoris... |
medium | 6.5 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-103302 The Payment Gateway for Idram WordPress plugin before 2.1.6 does not verify the... |
medium | 5.3 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-105992 The Ettrick Escape Room Booking WordPress plugin before 1.3.1 does not verify a... |
medium | 5.3 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-105996 The Booking Package WordPress plugin before 1.7.31 does not generate booking can... |
medium | 4.8 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-105998 The Booking Package WordPress plugin before 1.7.31 does not perform any authoriz... |
medium | 5.3 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-105999 The Booking Package WordPress plugin before 1.7.31 does not perform authorizatio... |
medium | 5.3 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-106932 The Moloni WordPress plugin before 5.0.14 does not perform capability or nonce c... |
medium | 6.5 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-107128 The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not verify... |
medium | 5.0 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-107788 The SmartyParcel WordPress plugin before 1.23.4 does not perform authorisation c... |
medium | 4.3 | — | — | 2026-10-21 | 2026-10-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.