October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,332
Critical
1,326
High
5,794
Medium
6,202
Low
648
Severity not reported
3,362
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1303), google (745), oracle (156), ibm (140), adobe (129), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-114068 Trigger.dev before 4.6.0 contains a missing authorization vulnerability in the w... |
high | 8.3 | — | — | 2026-10-21 | 2026-10-27 |
| CVE-2026-114069 Trigger.dev before 4.6.0 contains an improper authorization vulnerability in the... |
high | 8.1 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-114063 SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path traversal vul... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-27 |
| CVE-2026-114053 vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.... |
high | 8.1 | — | — | 2026-10-21 | 2026-10-27 |
| CVE-2026-114055 vLLM from 0.7.3 before 0.31.0 contains an uncontrolled resource consumption vuln... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-114059 ArcadeDB before 26.10.1 contains a remote code execution vulnerability that allo... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-114050 vLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache iden... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-114051 vLLM before 0.31.0 skips the min_tokens <= max_tokens check for /inference/v1/ge... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-114052 vLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability i... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-114045 FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side r... |
high | 8.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2021-48018 Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentr... |
high | 7.4 | — | — | 2026-10-21 | 2026-10-23 |
| CVE-2026-91668 Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-93441 IBM QRadar SIEM could allow a remote attacker to cause a denial of service due t... |
high | 8.6 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-93442 IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package... |
high | 8.2 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-93888 IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-91659 Vulnerability in Oracle Essbase (component: Build). |
high | 7.7 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91661 Vulnerability in Oracle Essbase (component: Security). |
high | 7.7 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91664 Vulnerability in Oracle Essbase (component: Security). |
high | 7.5 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91651 Vulnerability in Oracle Essbase (component: Essbase Web Platform). |
high | 8.5 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91653 Vulnerability in Oracle Essbase (component: Essbase Web Platform). |
high | 8.5 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91642 Vulnerability in Oracle Essbase (component: Security). |
high | 7.3 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91647 Vulnerability in Oracle Essbase (component: Security). |
high | 8.1 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91632 Vulnerability in Oracle Essbase (component: Security). |
high | 7.7 | — | Oracle / essbase | 2026-10-20 | 2026-10-26 |
| CVE-2026-91635 Vulnerability in Oracle Essbase (component: Security). |
high | 8.1 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91636 Vulnerability in Oracle Essbase (component: Security). |
high | 7.7 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91639 Vulnerability in Oracle Essbase (component: Security). |
high | 7.7 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91623 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
high | 7.4 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91625 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
high | 8.2 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91627 Vulnerability in the Oracle Communications Billing and Revenue Management produc... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91608 Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component:... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91610 Vulnerability in Oracle REST Data Services (component: General). |
high | 8.8 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91579 Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component:... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91597 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
high | 8.3 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91604 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91563 Vulnerability in the Oracle OLAP component of Oracle Database Server. |
high | 8.8 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91568 Vulnerability in the RDBMS component of Oracle Database Server. |
high | 7.7 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91573 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
high | 8.2 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91549 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91550 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91552 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-26 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.