October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,367
Critical
1,327
High
5,803
Medium
6,210
Low
649
Severity not reported
3,378
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1303), google (745), oracle (156), ibm (140), adobe (129), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-87305 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-87306 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-87307 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-87296 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-85783 Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2026-87263 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83407 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
high | 8.6 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83409 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83426 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
high | 8.7 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83398 Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware... |
high | 8.2 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83402 Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83403 Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83404 Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connec... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83393 Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (comp... |
high | 8.5 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-83379 Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusi... |
high | 8.7 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83367 Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suit... |
high | 7.4 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83370 Vulnerability in the Sourcing product of Oracle E-Business Suite (component: Auc... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-82891 IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obt... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-83361 Vulnerability in the Oracle Contract Lifecycle Management for Public Sector prod... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-83363 Vulnerability in the Oracle Contract Lifecycle Management for Public Sector prod... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-83366 Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suit... |
high | 7.4 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-76587 IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overfl... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-47025 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utilit... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-60662 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Servic... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-113732 virtualenv is a tool for creating isolated virtual python environments. |
high | 7.8 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-113776 virtualenv is a tool for creating isolated virtual python environments. |
high | 7.8 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-113343 Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113344 Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-26 |
| CVE-2026-113704 A vulnerability has been found in a2aproject a2a-rs up to 0.4.3. |
high | 7.3 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-113726 virtualenv is a tool for creating isolated virtual python environments. |
high | 7.8 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-113727 OpenChoreo is a developer platform for Kubernetes. |
high | 7.4 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-113728 Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. |
high | 7.5 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-113729 Moov signedxml is a pure Go library for processing signed XML documents. |
high | 7.5 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-113335 Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113337 Memory corruption in Scroll in Google Chrome prior to 156.0.8078.47 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113338 Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113339 Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113327 Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-21 |
| CVE-2026-113330 Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.80... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
| CVE-2026-113331 Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-10-22 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.