October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,479
Critical
1,340
High
5,869
Medium
6,256
Low
648
Severity not reported
3,366
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-91324 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Librar... |
medium | 4.7 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91312 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91317 Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (comp... |
medium | 5.9 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91318 Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (comp... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91319 Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (comp... |
medium | 5.9 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91320 Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (comp... |
medium | 5.7 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91309 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 5.9 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91297 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 6.1 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91298 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 5.4 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91289 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 5.3 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91290 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 5.5 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91292 Vulnerability in the JD Edwards EnterpriseOne Localizations product of Oracle JD... |
medium | 5.4 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91293 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 5.4 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91294 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 4.3 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91277 Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD... |
medium | 5.3 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91278 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 5.5 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91279 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 6.1 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91280 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 6.1 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91281 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 6.1 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91282 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 5.9 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91283 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 4.3 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91284 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91285 Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91274 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91275 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
medium | 6.6 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91276 Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD... |
medium | 5.3 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91262 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar... |
medium | 5.4 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91263 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
medium | 4.9 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-28 |
| CVE-2026-91257 Vulnerability in the iSupport product of Oracle E-Business Suite (component: Ser... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91244 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Servic... |
medium | 4.7 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-91245 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-91246 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware... |
medium | 6.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-91247 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware... |
medium | 5.9 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-91248 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware... |
medium | 5.3 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-91240 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware... |
medium | 5.9 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91208 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Servic... |
medium | 5.1 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91209 Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Wind... |
medium | 4.2 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91210 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87423 Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Wind... |
medium | 4.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-87800 IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker... |
medium | 6.8 | — | — | 2026-10-20 | 2026-10-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.