Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

October 2026 CVE archive

Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in October 2026Materially updated (Critical / KEV)
Total records
17,479
Critical
1,340
High
5,869
Medium
6,256
Low
648
Severity not reported
3,366
In CISA KEV
20

Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-91404
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl...
medium 4.0 —— 2026-10-202026-10-23
CVE-2026-91388
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component...
medium 4.7 —— 2026-10-202026-10-21
CVE-2026-91389
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component...
medium 5.4 —— 2026-10-202026-10-21
CVE-2026-91390
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component...
medium 5.4 —— 2026-10-202026-10-21
CVE-2026-91394
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Ja...
medium 5.9 —— 2026-10-202026-10-23
CVE-2026-91395
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente...
medium 6.5 —— 2026-10-202026-10-22
CVE-2026-91396
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente...
medium 6.5 —— 2026-10-202026-10-22
CVE-2026-91379
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente...
medium 4.7 —— 2026-10-202026-10-21
CVE-2026-91380
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente...
medium 4.0 —— 2026-10-202026-10-21
CVE-2026-91382
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente...
medium 6.5 —— 2026-10-202026-10-21
CVE-2026-91383
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards...
medium 6.6 —— 2026-10-202026-10-21
CVE-2026-91384
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards...
medium 6.5 —— 2026-10-202026-10-21
CVE-2026-91385
Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Ed...
medium 5.4 —— 2026-10-202026-10-21
CVE-2026-91386
Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD...
medium 6.8 —— 2026-10-202026-10-21
CVE-2026-91387
Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component...
medium 5.4 —— 2026-10-202026-10-21
CVE-2026-91371
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM...
medium 5.8 —— 2026-10-202026-10-21
CVE-2026-91373
Vulnerability in Oracle Java SE (component: JSSE).
medium 5.3 —— 2026-10-202026-10-22
CVE-2026-91374
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Ente...
medium 4.8 —— 2026-10-202026-10-21
CVE-2026-91375
Vulnerability in Oracle Java SE (component: Libraries).
medium 4.7 —— 2026-10-202026-10-21
CVE-2026-91376
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management produc...
medium 6.5 —— 2026-10-202026-10-21
CVE-2026-91378
Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (compon...
medium 6.1 —— 2026-10-202026-10-21
CVE-2026-91362
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM...
medium 5.3 —— 2026-10-202026-10-28
CVE-2026-91364
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM...
medium 6.8 —— 2026-10-202026-10-21
CVE-2026-91365
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM...
medium 5.9 —— 2026-10-202026-10-21
CVE-2026-91366
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM...
medium 4.7 —— 2026-10-202026-10-21
CVE-2026-91367
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM...
medium 6.5 —— 2026-10-202026-10-21
CVE-2026-91368
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM...
medium 4.1 —— 2026-10-202026-10-21
CVE-2026-91369
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM...
medium 5.3 —— 2026-10-202026-10-21
CVE-2026-91370
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM...
medium 5.3 —— 2026-10-202026-10-21
CVE-2026-91356
Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland produc...
medium 4.2 —— 2026-10-202026-10-28
CVE-2026-91357
Vulnerability in the Oracle Order Management product of Oracle E-Business Suite...
medium 5.3 —— 2026-10-202026-10-28
CVE-2026-91359
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM...
medium 5.3 —— 2026-10-202026-10-28
CVE-2026-91360
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM...
medium 6.5 —— 2026-10-202026-10-28
CVE-2026-91361
Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM...
medium 5.3 —— 2026-10-202026-10-22
CVE-2026-91351
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl...
medium 6.1 —— 2026-10-202026-10-28
CVE-2026-91352
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl...
medium 5.3 —— 2026-10-202026-10-22
CVE-2026-91339
Vulnerability in the iSupport product of Oracle E-Business Suite (component: Ser...
medium 6.5 —— 2026-10-202026-10-28
CVE-2026-91329
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards...
medium 6.5 —— 2026-10-202026-10-28
CVE-2026-91332
Vulnerability in Oracle Java SE (component: Networking).
medium 5.3 —— 2026-10-202026-10-22
CVE-2026-91336
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utilit...
medium 6.5 —— 2026-10-202026-10-28

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.