October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,200
Critical
3,101
High
7,090
Medium
6,614
Low
672
Severity not reported
4,723
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1176), google (780), ibm (323), mozilla (182), oracle (154), adobe (137), linux (125), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-91656 Vulnerability in Oracle Essbase (component: Federated Partitions). |
critical | 9.1 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-101420 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
critical | 9.6 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-91491 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
critical | 9.8 | — | Oracle / identity manager connector | 2026-10-20 | 2026-10-27 |
| CVE-2026-91490 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
critical | 9.1 | — | Oracle / identity manager connector | 2026-10-20 | 2026-10-27 |
| CVE-2026-91655 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.1 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91644 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.3 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-61174 Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply... |
critical | 9.0 | — | Oracle / product lifecycle analytics | 2026-07-21 | 2026-10-24 |
| CVE-2026-91638 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.9 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91658 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.9 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91663 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.9 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91637 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.9 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91665 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.8 | — | Oracle / essbase | 2026-10-20 | 2026-10-22 |
| CVE-2026-83038 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware... |
critical | 9.9 | — | Oracle / weblogic server | 2026-09-15 | 2026-10-15 |
| CVE-2026-83462 Vulnerability in the Oracle Mobile Application Server product of Oracle E-Busine... |
critical | 9.8 | — | Oracle / mobile application server | 2026-09-15 | 2026-10-09 |
| CVE-2013-7285 Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework h... |
critical | 9.8 | — | Oracle / endeca information discovery studio | 2019-05-15 | 2026-10-08 |
| CVE-2026-83452 Vulnerability in the Oracle Document Management and Collaboration product of Ora... |
critical | 9.8 | — | Oracle / document management and collaboration | 2026-09-15 | 2026-10-08 |
| CVE-2026-101450 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.1 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-28 |
| CVE-2026-91212 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
high | 8.6 | — | Oracle / identity manager connector | 2026-10-20 | 2026-10-28 |
| CVE-2026-91211 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
high | 8.7 | — | Oracle / identity manager connector | 2026-10-20 | 2026-10-28 |
| CVE-2026-91659 Vulnerability in Oracle Essbase (component: Build). |
high | 7.7 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91661 Vulnerability in Oracle Essbase (component: Security). |
high | 7.7 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-101388 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.1 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-101390 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 8.1 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-101411 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 8.1 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-101416 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.5 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-101428 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.5 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-101429 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.0 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-91494 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
high | 7.4 | — | Oracle / identity manager connector | 2026-10-20 | 2026-10-27 |
| CVE-2026-91493 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
high | 7.5 | — | Oracle / identity manager connector | 2026-10-20 | 2026-10-27 |
| CVE-2026-91492 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
high | 8.7 | — | Oracle / identity manager connector | 2026-10-20 | 2026-10-27 |
| CVE-2026-91489 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
high | 7.1 | — | Oracle / identity manager connector | 2026-10-20 | 2026-10-27 |
| CVE-2026-91488 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
high | 7.1 | — | Oracle / identity manager connector | 2026-10-20 | 2026-10-27 |
| CVE-2026-91653 Vulnerability in Oracle Essbase (component: Essbase Web Platform). |
high | 8.5 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91636 Vulnerability in Oracle Essbase (component: Security). |
high | 7.7 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91639 Vulnerability in Oracle Essbase (component: Security). |
high | 7.7 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91642 Vulnerability in Oracle Essbase (component: Security). |
high | 7.3 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91632 Vulnerability in Oracle Essbase (component: Security). |
high | 7.7 | — | Oracle / essbase | 2026-10-20 | 2026-10-26 |
| CVE-2026-91635 Vulnerability in Oracle Essbase (component: Security). |
high | 8.1 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91647 Vulnerability in Oracle Essbase (component: Security). |
high | 8.1 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91664 Vulnerability in Oracle Essbase (component: Security). |
high | 7.5 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.