October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,479
Critical
1,340
High
5,872
Medium
6,263
Low
649
Severity not reported
3,355
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-91654 Vulnerability in Oracle Essbase (component: Security). |
medium | 6.3 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91640 Vulnerability in Oracle Essbase (component: Security). |
medium | 5.0 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91641 Vulnerability in Oracle Essbase (component: Security). |
medium | 5.0 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91643 Vulnerability in Oracle Essbase (component: Java Based Agent). |
medium | 5.3 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91645 Vulnerability in Oracle Essbase (component: Security). |
medium | 5.3 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91646 Vulnerability in Oracle Essbase (component: Security). |
medium | 5.6 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91631 Vulnerability in Oracle Essbase (component: Security). |
medium | 5.0 | — | Oracle / essbase | 2026-10-20 | 2026-10-26 |
| CVE-2026-91633 Vulnerability in Oracle Essbase (component: Security). |
medium | 6.0 | — | Oracle / essbase | 2026-10-20 | 2026-10-26 |
| CVE-2026-91634 Vulnerability in Oracle Essbase (component: Security). |
medium | 5.3 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91617 Vulnerability in the Oracle Middleware Common Libraries and Tools product of Ora... |
medium | 5.5 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91628 Vulnerability in the Oracle Communications Billing and Revenue Management produc... |
medium | 5.5 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91629 Vulnerability in the Oracle Communications Billing and Revenue Management produc... |
medium | 4.7 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91630 Vulnerability in Oracle Essbase (component: Security). |
medium | 6.8 | — | Oracle / essbase | 2026-10-20 | 2026-10-26 |
| CVE-2026-91609 Vulnerability in Oracle REST Data Services (component: Graph QL). |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91615 Vulnerability in the Java VM component of Oracle Database Server. |
medium | 6.3 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91588 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91590 Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component:... |
medium | 5.4 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91598 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
medium | 4.3 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91600 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
medium | 4.3 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91607 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
medium | 4.3 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91559 Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of O... |
medium | 4.4 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91562 Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracl... |
medium | 4.4 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91565 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
medium | 6.4 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91574 Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component:... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91576 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91577 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
medium | 6.4 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91547 Vulnerability in Oracle GoldenGate (component: Vendor Access Module). |
medium | 5.5 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91553 Vulnerability in the PeopleSoft Enterprise FIN Product Configurator Brazil produ... |
medium | 4.4 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91554 Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component:... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91555 Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component:... |
medium | 6.1 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91536 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
medium | 5.0 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91541 Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-91523 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
medium | 5.4 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91524 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
medium | 4.3 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91526 Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component:... |
medium | 4.7 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91528 Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component:... |
medium | 4.3 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91530 Vulnerability in Oracle GoldenGate (component: Admin Client Executable). |
medium | 4.4 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91505 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
medium | 6.0 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-91514 Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component:... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91518 Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component:... |
medium | 5.4 | — | — | 2026-10-20 | 2026-10-26 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.