■ ARISTA CVE-2026-114625 · Fixed■ CISCO CVE-2026-76519 · Fixed■ CITRIX CVE-2026-88779 · Fixed■ COLLABORA CVE-2026-110447 · Fixed■ FORTINET CVE-2026-104286 · Fixed■ GITLAB CVE-2026-97229 · Fixed■ MICROSOFT KB5127648 · Confirmed by Microsoft (Oct 20)■ MICROSOFT KB5127648 · Fixed in October 13 updates■ ORACLE CVE-2026-75803 · Released 2026-10-20■ PALO ALTO CVE-2026-0322 · Fixed■ PALO ALTO CVE-2026-109618 · Fixed■ PLEX CVE-2026-96652 · Fixed■ SAP GHSA-4mv3-jxxm-9cx2 · Patches released 2026-10-13■ SONICWALL CVE-2026-19868 · Fixed■ VMWARE/BROADCOM KB 455737 · No critical release in October■ MICROSOFT KB5124010 · Mitigated (workaround only■ WORDPRESS CVE-2026-119977 · Fixed

← All impacts

Oracle

Oracle October 2026 CPU: 1,295 new security patches, including two CVSS 9.8 flaws in Database and APEX

Released

TL;DR: Oracle's October Critical Patch Update shipped on Oct 20 with 1,295 new security patches. At the top of the list are Oracle Database CVE-2026-75803 and APEX CVE-2026-101521, both CVSS 9.8 and remotely exploitable without authentication. (Oracle)

Item Detail Source
Released 2026-10-20 (Rev 1) Oracle
Volume 1,295 new security patches Oracle
Oracle Database CVE-2026-75803, CVSS 9.8, remotely exploitable without auth Oracle
Oracle APEX CVE-2026-101521, CVSS 9.8, remotely exploitable without auth Oracle
Last verified 2026-10-20Report an error: [email protected]