Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

October 2026 CVE archive

Records published in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in October 2026Materially updated (Critical / KEV)
Total records
17,348
Critical
1,326
High
5,799
Medium
6,207
Low
649
Severity not reported
3,367
In CISA KEV
20

Most affected vendors (by CPE data where available): microsoft (1303), google (745), oracle (156), ibm (140), adobe (129), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-91213
Vulnerability in the Oracle Business Process Management Suite product of Oracle...
high 8.8 —— 2026-10-202026-10-29
CVE-2026-91215
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo...
high 8.8 —— 2026-10-202026-10-29
CVE-2026-87417
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image...
high 7.5 —— 2026-10-202026-10-21
CVE-2026-87419
Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (com...
high 8.8 —— 2026-10-202026-10-21
CVE-2026-87420
Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (com...
high 8.8 —— 2026-10-202026-10-21
CVE-2026-87421
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image...
high 7.1 —— 2026-10-202026-10-21
CVE-2026-87408
Vulnerability in the Oracle Applications Framework product of Oracle E-Business...
high 8.7 —— 2026-10-202026-10-27
CVE-2026-87397
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl...
high 8.8 —— 2026-10-202026-10-28
CVE-2026-87398
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl...
high 7.5 —— 2026-10-202026-10-22
CVE-2026-87402
Vulnerability in the Applications DBA product of Oracle E-Business Suite (compon...
high 7.3 —— 2026-10-202026-10-21
CVE-2026-87403
Vulnerability in the Applications DBA product of Oracle E-Business Suite (compon...
high 7.1 —— 2026-10-202026-10-21
CVE-2026-87404
Vulnerability in the Pasta product of Oracle E-Business Suite (component: Printi...
high 7.5 —— 2026-10-202026-10-21
CVE-2026-87394
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl...
high 8.2 —— 2026-10-202026-10-28
CVE-2026-87395
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl...
high 7.5 —— 2026-10-202026-10-22
CVE-2026-87363
Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (componen...
high 7.5 —— 2026-10-202026-10-28
CVE-2026-87364
Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (com...
high 8.8 —— 2026-10-202026-10-28
CVE-2026-87369
Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (com...
high 7.5 —— 2026-10-202026-10-22
CVE-2026-87356
Vulnerability in the Applications Platform Engineering product of Oracle E-Busin...
high 7.8 —— 2026-10-202026-10-28
CVE-2026-87357
Vulnerability in the Order Capture product of Oracle E-Business Suite (component...
high 7.2 —— 2026-10-202026-10-28
CVE-2026-87358
Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (c...
high 7.1 —— 2026-10-202026-10-28
CVE-2026-87359
Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (com...
high 8.8 —— 2026-10-202026-10-28
CVE-2026-87346
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (com...
high 8.7 —— 2026-10-202026-10-30
CVE-2026-87351
Vulnerability in Oracle GoldenGate (component: Admin Server Executable).
high 8.8 —— 2026-10-202026-10-23
CVE-2026-87322
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp...
high 8.4 —— 2026-10-202026-10-28
CVE-2026-87308
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards...
high 7.1 —— 2026-10-202026-10-27
CVE-2026-87309
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards...
high 8.1 —— 2026-10-202026-10-28
CVE-2026-87310
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards...
high 8.8 —— 2026-10-202026-10-28
CVE-2026-87312
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards...
high 7.5 —— 2026-10-202026-10-28
CVE-2026-87313
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards...
high 8.8 —— 2026-10-202026-10-28
CVE-2026-87314
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards...
high 7.4 —— 2026-10-202026-10-28
CVE-2026-87315
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards...
high 7.5 —— 2026-10-202026-10-28
CVE-2026-87316
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards...
high 7.8 —— 2026-10-202026-10-28
CVE-2026-87300
Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusi...
high 8.7 —— 2026-10-202026-10-27
CVE-2026-87301
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp...
high 8.4 —— 2026-10-202026-10-27
CVE-2026-87304
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl...
high 8.6 —— 2026-10-202026-10-27
CVE-2026-87305
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards...
high 8.1 —— 2026-10-202026-10-27
CVE-2026-87306
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards...
high 8.1 —— 2026-10-202026-10-27
CVE-2026-87307
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards...
high 7.1 —— 2026-10-202026-10-27
CVE-2026-87296
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (...
high 7.5 —— 2026-10-202026-10-27
CVE-2026-85783
Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded...
high 7.5 —— 2026-10-202026-10-30

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.