October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-87351 Vulnerability in Oracle GoldenGate (component: Admin Server Executable). |
high | 8.8 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-87322 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 8.4 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87308 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-87309 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87310 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87312 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87313 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87314 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
high | 7.4 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87315 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87316 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87300 Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusi... |
high | 8.7 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-87301 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 8.4 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-87304 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl... |
high | 8.6 | — | Oracle / outside in technology | 2026-10-20 | 2026-11-04 |
| CVE-2026-87305 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-87306 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-87307 Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-87296 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
high | 7.5 | — | Oracle / access manager | 2026-10-20 | 2026-11-04 |
| CVE-2026-85783 Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2026-87263 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83407 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
high | 8.6 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83409 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83426 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
high | 8.7 | — | Oracle / access manager | 2026-10-20 | 2026-11-04 |
| CVE-2026-83398 Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware... |
high | 8.2 | — | Oracle / data integrator | 2026-10-20 | 2026-11-04 |
| CVE-2026-83402 Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware... |
high | 8.8 | — | Oracle / identity manager | 2026-10-20 | 2026-11-03 |
| CVE-2026-83403 Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware... |
high | 8.8 | — | Oracle / identity manager | 2026-10-20 | 2026-11-03 |
| CVE-2026-83404 Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connec... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83393 Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (comp... |
high | 8.5 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-83379 Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusi... |
high | 8.7 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83367 Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suit... |
high | 7.4 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83370 Vulnerability in the Sourcing product of Oracle E-Business Suite (component: Auc... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-82891 IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obt... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-83361 Vulnerability in the Oracle Contract Lifecycle Management for Public Sector prod... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-83363 Vulnerability in the Oracle Contract Lifecycle Management for Public Sector prod... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-83366 Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suit... |
high | 7.4 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-76587 IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overfl... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-47025 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utilit... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-60662 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Servic... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-113732 virtualenv is a tool for creating isolated virtual python environments. |
high | 7.8 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-113776 virtualenv is a tool for creating isolated virtual python environments. |
high | 7.8 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-113343 Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-20 | 2026-11-03 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.