October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-113744 A security vulnerability has been detected in Tenda AC19 16.03.10.07. |
critical | 10.0 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-114119 Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft... |
critical | 9.8 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-114108 HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vul... |
critical | 9.8 | — | — | 2026-10-21 | 2026-10-27 |
| CVE-2026-113736 A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. |
critical | 9.8 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-92559 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attack... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-91658 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.9 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91663 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.9 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91665 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.8 | — | Oracle / essbase | 2026-10-20 | 2026-10-22 |
| CVE-2026-91655 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.1 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91656 Vulnerability in Oracle Essbase (component: Federated Partitions). |
critical | 9.1 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91644 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.3 | — | Oracle / essbase | 2026-10-20 | 2026-10-27 |
| CVE-2026-91637 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.9 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91638 Vulnerability in Oracle Essbase (component: Security). |
critical | 9.9 | — | Oracle / essbase | 2026-10-20 | 2026-10-23 |
| CVE-2026-91622 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
critical | 9.3 | — | — | 2026-10-20 | 2026-10-26 |
| CVE-2026-91624 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-91495 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar... |
critical | 9.8 | — | Oracle / webcenter content | 2026-10-20 | 2026-11-03 |
| CVE-2026-91490 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
critical | 9.1 | — | Oracle / identity manager connector | 2026-10-20 | 2026-10-27 |
| CVE-2026-91491 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
critical | 9.8 | — | Oracle / identity manager connector | 2026-10-20 | 2026-10-27 |
| CVE-2026-91408 Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware... |
critical | 9.8 | — | Oracle / identity manager | 2026-10-20 | 2026-11-03 |
| CVE-2026-91354 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl... |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91341 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91323 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-91305 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
critical | 9.1 | — | Oracle / jd edwards enterpriseone tools | 2026-10-20 | 2026-11-02 |
| CVE-2026-91299 Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD... |
critical | 10.0 | — | Oracle / jd edwards enterpriseone orchestrator | 2026-10-20 | 2026-11-02 |
| CVE-2026-91265 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
critical | 9.1 | — | Oracle / jd edwards enterpriseone tools | 2026-10-20 | 2026-11-02 |
| CVE-2026-91251 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91243 Vulnerability in the Oracle Business Process Management Suite product of Oracle... |
critical | 9.6 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91250 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91233 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.8 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91234 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.8 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91235 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.8 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91236 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.8 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91241 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91225 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.1 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91230 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.3 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91231 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 10.0 | — | Oracle / soa suite | 2026-10-20 | 2026-11-04 |
| CVE-2026-91232 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.9 | — | Oracle / soa suite | 2026-10-20 | 2026-11-04 |
| CVE-2026-91216 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 10.0 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91218 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
critical | 9.6 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91220 Vulnerability in the Oracle Business Process Management Suite product of Oracle... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.