October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-91658 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.9 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91663 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.9 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91665 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.8 | — | Oracle / essbase | 2026-10-20 | 2026-10-22 |
| CVE-2026-91655 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.1 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91656 Vulnerability in Oracle Essbase (component: Federated Partitions). |
critical | 9.1 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91644 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.3 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91637 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.9 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91638 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.9 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91495 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar... |
critical | 9.8 | — | Oracle / webcenter content | 2026-10-20 | 2026-11-03 |
| CVE-2026-91490 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
critical | 9.1 | — | Oracle / identity manager connector | 2026-10-20 | 2026-10-27 |
| CVE-2026-91491 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
critical | 9.8 | — | Oracle / identity manager connector | 2026-10-20 | 2026-10-27 |
| CVE-2026-91408 Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware... |
critical | 9.8 | — | Oracle / identity manager | 2026-10-20 | 2026-11-03 |
| CVE-2026-91305 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
critical | 9.1 | — | Oracle / jd edwards enterpriseone tools | 2026-10-20 | 2026-11-02 |
| CVE-2026-91299 Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD... |
critical | 10.0 | — | Oracle / jd edwards enterpriseone orchestrator | 2026-10-20 | 2026-11-02 |
| CVE-2026-91265 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
critical | 9.1 | — | Oracle / jd edwards enterpriseone tools | 2026-10-20 | 2026-11-02 |
| CVE-2026-91233 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.8 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91234 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.8 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91235 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.8 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91236 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.8 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91225 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.1 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91230 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.3 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91231 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 10.0 | — | Oracle / soa suite | 2026-10-20 | 2026-11-04 |
| CVE-2026-91232 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.9 | — | Oracle / soa suite | 2026-10-20 | 2026-11-04 |
| CVE-2026-91216 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 10.0 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91218 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.6 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91221 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 10.0 | — | Oracle / soa suite | 2026-10-20 | 2026-11-04 |
| CVE-2026-91224 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.9 | — | Oracle / soa suite | 2026-10-20 | 2026-11-04 |
| CVE-2026-91214 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.8 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-87337 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
critical | 10.0 | — | Oracle / access manager | 2026-10-20 | 2026-11-04 |
| CVE-2026-87251 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
critical | 9.8 | — | Oracle / access manager | 2026-10-20 | 2026-11-04 |
| CVE-2026-83396 Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware... |
critical | 9.8 | — | Oracle / data integrator | 2026-10-20 | 2026-11-04 |
| CVE-2026-83397 Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware... |
critical | 9.8 | — | Oracle / data integrator | 2026-10-20 | 2026-11-04 |
| CVE-2026-101446 Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM... |
critical | 9.9 | — | Oracle / siebel crm | 2026-10-20 | 2026-11-03 |
| CVE-2026-101420 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
critical | 9.6 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-91668 Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware... |
high | 8.8 | — | Oracle / data integrator | 2026-10-20 | 2026-11-03 |
| CVE-2026-91659 Vulnerability in Oracle Essbase (component: Build). |
high | 7.7 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91661 Vulnerability in Oracle Essbase (component: Security). |
high | 7.7 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91664 Vulnerability in Oracle Essbase (component: Security). |
high | 7.5 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91651 Vulnerability in Oracle Essbase (component: Essbase Web Platform). |
high | 8.5 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91653 Vulnerability in Oracle Essbase (component: Essbase Web Platform). |
high | 8.5 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.