October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
23,222
Critical
3,223
High
7,598
Medium
7,200
Low
650
Severity not reported
4,551
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1426), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-101408 Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (compo... |
medium | 6.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101453 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
medium | 6.7 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101470 Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply... |
medium | 6.0 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101472 Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply... |
medium | 5.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101475 Vulnerability in the Primavera Unifier product of Oracle Construction and Engine... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101476 Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (compo... |
medium | 4.3 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101480 Vulnerability in Oracle Secure Backup (component: NDMP daemon). |
medium | 5.3 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101483 Vulnerability in Oracle Secure Backup (component: Device Management and Support)... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101485 Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analy... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101493 Vulnerability in Oracle REST Data Services (component: Core). |
medium | 5.4 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101507 Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101510 Vulnerability in the Oracle Net Services component of Oracle Database Server. |
medium | 4.4 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101511 Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle E... |
medium | 4.3 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101512 Vulnerability in the RDBMS component of Oracle Database Server. |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101515 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware... |
medium | 5.9 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101516 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101517 Vulnerability in the Oracle Utilities Network Management System product of Oracl... |
medium | 5.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101522 Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB). |
medium | 5.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101533 Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (comp... |
medium | 6.6 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101538 Vulnerability in the Oracle Order Management product of Oracle E-Business Suite... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101547 Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (comp... |
medium | 6.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101553 Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (componen... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101558 Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (compo... |
medium | 6.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101559 Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (compo... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101564 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
medium | 5.9 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101565 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
medium | 6.2 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101568 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel... |
medium | 5.3 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101571 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel... |
medium | 5.6 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101573 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel... |
medium | 6.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101574 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: OID... |
medium | 6.9 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101578 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel... |
medium | 5.3 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-113741 A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. |
medium | 4.3 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-111849 Missing Authorization vulnerability in Magepeople inc. |
medium | 5.3 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-114248 A security vulnerability has been detected in dhikshitha29 Insurance-Management-... |
medium | 5.3 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-109949 FreeRDP 3.0.0 before 3.32.0 contains an improper restriction of excessive authen... |
medium | 6.5 | — | Freerdp / freerdp | 2026-10-13 | 2026-10-21 |
| CVE-2026-109950 FreeRDP from 3.0.0 before 3.32.0 contains a heap out-of-bounds read vulnerabilit... |
medium | 4.3 | — | Freerdp / freerdp | 2026-10-13 | 2026-10-21 |
| CVE-2026-92745 A flaw was found in cockpit-machines. |
medium | 5.0 | — | — | 2026-09-18 | 2026-10-21 |
| CVE-2026-92747 A flaw was found in `cockpit-machines`. |
medium | 5.0 | — | — | 2026-09-18 | 2026-10-21 |
| CVE-2026-92768 A flaw was found in cockpit-machines. |
medium | 5.5 | — | — | 2026-09-18 | 2026-10-21 |
| CVE-2026-109951 FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in D... |
medium | 5.3 | — | Freerdp / freerdp | 2026-10-13 | 2026-10-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.