October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-101457 Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (c... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101458 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
high | 8.2 | — | Oracle / siebel crm | 2026-10-20 | 2026-11-04 |
| CVE-2026-101459 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
high | 8.3 | — | Oracle / siebel crm | 2026-10-20 | 2026-11-04 |
| CVE-2026-101460 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
high | 7.5 | — | Oracle / siebel crm | 2026-10-20 | 2026-11-04 |
| CVE-2026-101461 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
high | 7.5 | — | Oracle / siebel crm | 2026-10-20 | 2026-11-04 |
| CVE-2026-101447 Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (compon... |
high | 7.1 | — | — | 2026-10-20 | 2026-11-03 |
| CVE-2026-101450 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.1 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-28 |
| CVE-2026-101451 Vulnerability in the Siebel Life Sciences product of Oracle Siebel CRM (componen... |
high | 8.7 | — | — | 2026-10-20 | 2026-11-03 |
| CVE-2026-101452 Vulnerability in Oracle Autonomous Health Framework (component: AHF Instant Diag... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-101438 Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM... |
high | 8.0 | — | Oracle / siebel crm | 2026-10-20 | 2026-11-03 |
| CVE-2026-101427 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 8.1 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-11-03 |
| CVE-2026-101428 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.5 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-101429 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.0 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-101431 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 8.7 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-11-02 |
| CVE-2026-101434 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.6 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-11-03 |
| CVE-2026-101421 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.5 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-29 |
| CVE-2026-101422 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 8.1 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-11-03 |
| CVE-2026-101410 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.5 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-11-02 |
| CVE-2026-101411 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 8.1 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-101416 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.5 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-101409 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.5 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-11-03 |
| CVE-2026-101398 Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (compone... |
high | 7.6 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-101387 Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (compone... |
high | 7.6 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101388 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.1 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-101390 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 8.1 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-94266 libcurl could accidentally return a URL for `curl_easy_getinfo()`'s
`CURLINFO_EF... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2026-92386 When writing a long cookie name and value to a Netscape cookie jar, a remote
HTT... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-92387 By permanently omitting the final control-response line, a malicious FTP,
IMAP,... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-92389 libcurl's TFTP state machine fails to validate state transitions against the
req... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2026-92390 When invoked with `--remote-header-name` (`-J`), curl fails to preserve its
docu... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2026-92391 A deeply nested multipart MIME structure constructed via the public API causes
a... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2026-86415 libcurl's connection cache match function never considers the automatic client
c... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2026-87862 Importing a `includeSubDomains` parent HSTS entry before a longer-lived child
en... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2026-87863 An authenticated HTTPS origin can supply an HSTS `max-age` value that the
parser... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2026-87864 Enabling `CURLOPT_CRLF` causes curl to advertise the raw input byte count in
the... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2026-87865 When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated
initial... |
high | 7.4 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2026-111758 markdown-it is a Markdown parser. |
high | 7.5 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-112407 Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serve... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-107928 When curl is built with GnuTLS, a malicious WebSocket server can make curl
send... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2026-107929 When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is
se... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-30 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.