October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,039
Critical
3,131
High
7,102
Medium
6,936
Low
617
Severity not reported
4,253
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-87331 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
low | 3.4 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-114122 Electron is a framework for writing cross-platform desktop applications using Ja... |
low | 3.9 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-113706 A vulnerability was identified in a2aproject a2a-rs up to 0.4.3. |
low | 3.5 | — | — | 2026-10-21 | 2026-10-27 |
| CVE-2026-114048 WWBN AVideo before 24.0 contains a cross-site request forgery vulnerability in l... |
low | 3.5 | — | — | 2026-10-21 | 2026-10-27 |
| CVE-2026-106438 An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver ca... |
low | 3.7 | — | Mongodb / c driver | 2026-10-08 | 2026-10-27 |
| CVE-2026-87292 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... |
low | 3.7 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-87255 Vulnerability in Oracle Java SE (component: Compiler). |
low | 3.7 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2024-4412 The software accepts user-supplied data without sufficient validation, allowing... |
low | 2.7 | — | — | 2026-10-19 | 2026-10-27 |
| CVE-2026-60814 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
low | 3.9 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-60819 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
low | 3.7 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2024-7083 The Email Encoder WordPress plugin before 2.3.4 does not sanitise and escape som... |
low | 3.5 | — | — | 2026-04-20 | 2026-10-27 |
| CVE-2024-32389 Buffer Overflow vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3... |
low | 3.5 | — | — | 2026-07-16 | 2026-10-27 |
| CVE-2026-83373 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
low | 3.0 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-60964 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
low | 1.9 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-60887 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
low | 3.8 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-116726 Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_... |
low | 3.3 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116727 gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in vgm_... |
low | 3.3 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116734 flatcc through 0.6.4 contains an integer overflow vulnerability in the check_hea... |
low | 3.7 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116556 A vulnerability was found in Argilla up to 2.8.0. |
low | 2.4 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116640 A flaw has been found in Saruf-Ratul HR-Payroll-Management-System e7cd81477001af... |
low | 3.5 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-87401 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
low | 3.3 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-87412 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
low | 2.7 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-87416 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
low | 3.7 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-87418 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
low | 2.5 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-91650 Vulnerability in Oracle Essbase (component: Java Based Agent). |
low | 3.7 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-83392 Vulnerability in the Oracle Applications Manager product of Oracle E-Business Su... |
low | 3.1 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83388 Vulnerability in the Oracle Applications Manager product of Oracle E-Business Su... |
low | 2.2 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83376 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente... |
low | 3.7 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-73964 Vulnerability in the RDBMS component of Oracle Database Server. |
low | 2.7 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101846 Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (compo... |
low | 3.5 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101845 Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (compo... |
low | 3.1 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101844 Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business S... |
low | 3.1 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-109564 LearnHouse before 1.4.0 contains a missing authorization vulnerability in POST /... |
low | 3.1 | — | — | 2026-10-12 | 2026-10-27 |
| CVE-2026-91616 Vulnerability in the Oracle Middleware Common Libraries and Tools product of Ora... |
low | 3.7 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91613 Vulnerability in the Oracle Communications Unified Inventory Management product... |
low | 3.3 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91614 Vulnerability in the Oracle Communications Unified Inventory Management product... |
low | 3.3 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91612 Vulnerability in the Oracle Communications Unified Inventory Management product... |
low | 3.3 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91582 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
low | 3.7 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-109366 Zebra before 6.4.0 contains an improper integrity validation vulnerability in th... |
low | 3.7 | — | — | 2026-10-12 | 2026-10-26 |
| CVE-2025-15705 The Contact Form by Supsystic WordPress plugin before 1.8.0 does not sanitise an... |
low | 3.5 | — | — | 2026-10-25 | 2026-10-26 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.