Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

October 2026 CVE archive

Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in October 2026Materially updated (Critical / KEV)
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21

Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-91664
Vulnerability in Oracle Essbase (component: Security).
high 7.5 —Oracle / essbase 2026-10-202026-10-23
CVE-2026-91651
Vulnerability in Oracle Essbase (component: Essbase Web Platform).
high 8.5 —Oracle / essbase 2026-10-202026-10-23
CVE-2026-91653
Vulnerability in Oracle Essbase (component: Essbase Web Platform).
high 8.5 —Oracle / essbase 2026-10-202026-10-27
CVE-2026-91642
Vulnerability in Oracle Essbase (component: Security).
high 7.3 —Oracle / essbase 2026-10-202026-10-27
CVE-2026-91647
Vulnerability in Oracle Essbase (component: Security).
high 8.1 —Oracle / essbase 2026-10-202026-10-23
CVE-2026-91632
Vulnerability in Oracle Essbase (component: Security).
high 7.7 —Oracle / essbase 2026-10-202026-10-26
CVE-2026-91635
Vulnerability in Oracle Essbase (component: Security).
high 8.1 —Oracle / essbase 2026-10-202026-10-23
CVE-2026-91636
Vulnerability in Oracle Essbase (component: Security).
high 7.7 —Oracle / essbase 2026-10-202026-10-27
CVE-2026-91639
Vulnerability in Oracle Essbase (component: Security).
high 7.7 —Oracle / essbase 2026-10-202026-10-27
CVE-2026-91623
Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ...
high 7.4 —— 2026-10-202026-10-26
CVE-2026-91625
Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ...
high 8.2 —— 2026-10-202026-10-26
CVE-2026-91627
Vulnerability in the Oracle Communications Billing and Revenue Management produc...
high 7.8 —— 2026-10-202026-10-26
CVE-2026-91608
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component:...
high 7.5 —— 2026-10-202026-10-26
CVE-2026-91610
Vulnerability in Oracle REST Data Services (component: General).
high 8.8 —— 2026-10-202026-10-26
CVE-2026-91579
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component:...
high 8.8 —— 2026-10-202026-10-26
CVE-2026-91597
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 8.3 —— 2026-10-202026-10-26
CVE-2026-91604
Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ...
high 7.5 —— 2026-10-202026-10-26
CVE-2026-91563
Vulnerability in the Oracle OLAP component of Oracle Database Server.
high 8.8 —— 2026-10-202026-10-26
CVE-2026-91568
Vulnerability in the RDBMS component of Oracle Database Server.
high 7.7 —— 2026-10-202026-10-26
CVE-2026-91573
Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ...
high 8.2 —— 2026-10-202026-10-26
CVE-2026-91549
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 7.8 —— 2026-10-202026-10-26
CVE-2026-91550
Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ...
high 8.8 —— 2026-10-202026-10-26
CVE-2026-91552
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware...
high 7.5 —Oracle / webcenter sites 2026-10-202026-11-04
CVE-2026-91557
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 7.0 —— 2026-10-202026-10-26
CVE-2026-91534
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 8.6 —— 2026-10-202026-10-26
CVE-2026-91535
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 8.8 —— 2026-10-202026-10-26
CVE-2026-91537
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utilit...
high 7.8 —Oracle / solaris 2026-10-202026-11-04
CVE-2026-91539
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 7.8 —— 2026-10-202026-10-26
CVE-2026-91542
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware...
high 7.5 —Oracle / webcenter sites 2026-10-202026-11-04
CVE-2026-91545
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 7.8 —— 2026-10-202026-10-26
CVE-2026-91546
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 8.1 —— 2026-10-202026-10-26
CVE-2026-91520
Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ...
high 8.8 —— 2026-10-202026-10-26
CVE-2026-91521
Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ...
high 8.8 —— 2026-10-202026-10-26
CVE-2026-91527
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems...
high 8.8 —— 2026-10-202026-10-26
CVE-2026-91532
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Su...
high 8.8 —Oracle / applications manager 2026-10-202026-11-04
CVE-2026-91506
Vulnerability in the Workflow product of Oracle E-Business Suite (component: Wor...
high 8.1 —— 2026-10-202026-10-27
CVE-2026-91511
Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (compo...
high 7.1 —— 2026-10-202026-10-26
CVE-2026-91512
Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ...
high 7.2 —— 2026-10-202026-10-26
CVE-2026-91515
Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ...
high 7.5 —— 2026-10-202026-10-26
CVE-2026-91517
Vulnerability in the Oracle Management Pack for Oracle GoldenGate product of Ora...
high 8.0 —— 2026-10-202026-10-26

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.