October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,937
Critical
3,121
High
7,064
Medium
6,901
Low
608
Severity not reported
4,243
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-91214 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.8 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91216 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 10.0 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91218 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.6 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91225 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.1 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91230 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.3 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91233 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.8 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91234 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.8 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91235 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.8 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91236 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.8 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91656 Vulnerability in Oracle Essbase (component: Federated Partitions). |
critical | 9.1 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-101420 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
critical | 9.6 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-91491 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
critical | 9.8 | — | Oracle / identity manager connector | 2026-10-20 | 2026-10-27 |
| CVE-2026-91490 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
critical | 9.1 | — | Oracle / identity manager connector | 2026-10-20 | 2026-10-27 |
| CVE-2026-91655 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.1 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91644 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.3 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-61174 Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply... |
critical | 9.0 | — | Oracle / product lifecycle analytics | 2026-07-21 | 2026-10-24 |
| CVE-2026-91638 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.9 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91658 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.9 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91663 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.9 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91637 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.9 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91665 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.8 | — | Oracle / essbase | 2026-10-20 | 2026-10-22 |
| CVE-2026-83038 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware... |
critical | 9.9 | — | Oracle / weblogic server | 2026-09-15 | 2026-10-15 |
| CVE-2026-83462 Vulnerability in the Oracle Mobile Application Server product of Oracle E-Busine... |
critical | 9.8 | — | Oracle / mobile application server | 2026-09-15 | 2026-10-09 |
| CVE-2013-7285 Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework h... |
critical | 9.8 | — | Oracle / endeca information discovery studio | 2019-05-15 | 2026-10-08 |
| CVE-2026-83452 Vulnerability in the Oracle Document Management and Collaboration product of Ora... |
critical | 9.8 | — | Oracle / document management and collaboration | 2026-09-15 | 2026-10-08 |
| CVE-2026-101775 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
high | 7.4 | — | Oracle / mysql cluster | 2026-10-20 | 2026-10-30 |
| CVE-2026-91217 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
high | 8.6 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91219 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
high | 8.6 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91228 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
high | 7.1 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91237 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
high | 7.5 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91238 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
high | 7.1 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91239 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
high | 8.8 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-101781 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
high | 8.8 | — | Oracle / mysql cluster | 2026-10-20 | 2026-10-30 |
| CVE-2026-101771 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
high | 8.1 | — | Oracle / mysql cluster | 2026-10-20 | 2026-10-30 |
| CVE-2026-101770 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
high | 8.1 | — | Oracle / mysql cluster | 2026-10-20 | 2026-10-30 |
| CVE-2026-101421 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.5 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-29 |
| CVE-2026-101772 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
high | 8.1 | — | Oracle / mysql cluster | 2026-10-20 | 2026-10-29 |
| CVE-2026-101773 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
high | 7.1 | — | Oracle / mysql cluster | 2026-10-20 | 2026-10-29 |
| CVE-2026-101450 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.1 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-28 |
| CVE-2026-91212 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
high | 8.6 | — | Oracle / identity manager connector | 2026-10-20 | 2026-10-28 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.