October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
16,204
Critical
1,207
High
5,399
Medium
5,731
Low
600
Severity not reported
3,267
In CISA KEV
17
Most affected vendors (by CPE data where available): microsoft (1078), google (711), ibm (140), oracle (117), adobe (110), broadcom (61), apache (45), freerdp (42), linuxfoundation (41), dell (40)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-92559 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attack... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-91658 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.9 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91663 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.9 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91665 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.8 | — | Oracle / essbase | 2026-10-20 | 2026-10-22 |
| CVE-2026-91655 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.1 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91656 Vulnerability in Oracle Essbase (component: Federated Partitions). |
critical | 9.1 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91644 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.3 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91637 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.9 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91638 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.9 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91622 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
critical | 9.3 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91624 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91495 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91490 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
critical | 9.1 | — | Oracle / identity manager connector | 2026-10-20 | 2026-10-27 |
| CVE-2026-91491 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
critical | 9.8 | — | Oracle / identity manager connector | 2026-10-20 | 2026-10-27 |
| CVE-2026-91408 Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91354 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl... |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91341 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91323 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-91305 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-91299 Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD... |
critical | 10.0 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-91265 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-91251 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91243 Vulnerability in the Oracle Business Process Management Suite product of Oracle... |
critical | 9.6 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91250 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91233 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91234 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91235 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91236 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91241 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91225 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91230 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.3 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91231 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 10.0 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91232 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91216 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 10.0 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91218 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.6 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91220 Vulnerability in the Oracle Business Process Management Suite product of Oracle... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91221 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 10.0 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91222 Vulnerability in the Oracle Business Process Management Suite product of Oracle... |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91224 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91214 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.