October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,919
Critical
3,121
High
7,058
Medium
6,893
Low
608
Severity not reported
4,239
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-90959 A path traversal vulnerability was found in pulpcore. |
high | 8.1 | — | — | 2026-09-24 | 2026-10-21 |
| CVE-2026-101658 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su... |
high | 7.4 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101661 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su... |
high | 7.4 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101662 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101643 Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (com... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101645 Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101646 Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component... |
high | 7.2 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101647 Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101649 Vulnerability in the Oracle Partner Management product of Oracle E-Business Suit... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101650 Vulnerability in the Oracle Partner Management product of Oracle E-Business Suit... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101636 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su... |
high | 7.4 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101638 Vulnerability in the Applications DBA product of Oracle E-Business Suite (compon... |
high | 7.3 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101641 Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (c... |
high | 7.6 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101642 Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (c... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101466 Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (comp... |
high | 7.2 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-70303 Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate p... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83756 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker t... |
high | 7.8 | — | Microsoft / windows 10 21h2 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83761 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker t... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-21 |
| CVE-2026-83768 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to el... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-21 |
| CVE-2026-76481 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-100072 In the Linux kernel, the following vulnerability has been resolved:
ACPI: platf... |
high | 7.8 | — | Linux / linux kernel | 2026-09-25 | 2026-10-21 |
| CVE-2026-87402 Vulnerability in the Applications DBA product of Oracle E-Business Suite (compon... |
high | 7.3 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-87403 Vulnerability in the Applications DBA product of Oracle E-Business Suite (compon... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-87404 Vulnerability in the Pasta product of Oracle E-Business Suite (component: Printi... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-87417 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-87419 Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (com... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-87420 Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (com... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-87421 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91377 Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (compon... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101594 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101596 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101598 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101599 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101602 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
high | 8.0 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101603 Vulnerability in the Oracle Communications Unified Inventory Management product... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101604 Vulnerability in the Oracle Communications Unified Inventory Management product... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101579 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel... |
high | 7.2 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101585 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel... |
high | 7.2 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-102499 The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Cal... |
high | 7.7 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-105262 The Falang multilanguage for WordPress plugin before 1.4.6 does not perform a ca... |
high | 8.0 | — | — | 2026-10-21 | 2026-10-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.