Skip to content
Noroxi

Patch TuesdayOctober 2026

On the second Tuesday of each month Microsoft, Adobe, SAP, Siemens and Schneider Electric publish in bulk; Oracle on the third Tuesday of January, April, July and October. Records published that day, from our own database, sorted by action score: KEV and mature exploits first.

How it is computed: CNA stamp + publication date (two-day window, UTC). No claim of a one-to-one match with the vendor bulletin; out-of-band updates land on other days.

1,030 records · 1 KEV

Affecting your stack

This month's records that match the products and versions in your stack.

Sign in to see the ones matching your stack; records and notifications are free. →

Microsoft · October 13

400 · 1 KEV · 62 critical

+388 moreAll records of the vendor

Adobe · October 13

177 · 0 KEV · 26 critical
  • CVE-2026-103849
    40Plan

    Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

    CriticalCVSS 10.0Proof of conceptEPSS 1%

    adobe · adobe commerceOct 13, 2026

  • CVE-2026-105899
    40Plan

    ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)

    CriticalCVSS 10.0No exploitEPSS 1%

    adobe · coldfusionOct 13, 2026

  • CVE-2026-106622
    40Plan

    ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)

    CriticalCVSS 10.0No exploitEPSS 0%

    adobe · coldfusionOct 13, 2026

  • CVE-2026-106624
    40Plan

    ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)

    CriticalCVSS 10.0No exploitEPSS 1%

    adobe · coldfusionOct 13, 2026

  • CVE-2026-48382
    40Plan

    Adobe Experience Manager | Incorrect Authorization (CWE-863)

    CriticalCVSS 10.0No exploitEPSS 0%

    adobe · adobe experience manager as a cloud serviceOct 13, 2026

  • CVE-2026-48383
    40Plan

    Adobe Experience Manager | Incorrect Authorization (CWE-863)

    CriticalCVSS 10.0No exploitEPSS 0%

    adobe · adobe experience manager as a cloud serviceOct 13, 2026

  • CVE-2026-90532
    40Plan

    Adobe Experience Manager | Incorrect Authorization (CWE-863)

    CriticalCVSS 10.0No exploitEPSS 0%

    adobe · adobe experience manager as a cloud serviceOct 13, 2026

  • CVE-2026-103848
    39Monitor

    Adobe Experience Manager | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

    CriticalCVSS 9.9No exploitEPSS 1%

    adobe · adobe experience manager 6.5 ltsOct 13, 2026

  • CVE-2026-105895
    39Monitor

    Adobe Experience Manager | Improper Input Validation (CWE-20)

    CriticalCVSS 9.9No exploitEPSS 0%

    adobe · experience managerOct 13, 2026

  • CVE-2026-105903
    39Monitor

    ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)

    CriticalCVSS 9.9No exploitEPSS 0%

    adobe · coldfusionOct 13, 2026

  • CVE-2026-106612
    39Monitor

    ColdFusion | Incorrect Authorization (CWE-863)

    CriticalCVSS 9.9No exploitEPSS 0%

    adobe · coldfusionOct 13, 2026

  • CVE-2026-75732
    39Monitor

    Adobe Experience Manager | Incorrect Authorization (CWE-863)

    CriticalCVSS 9.9No exploitEPSS 0%

    adobe · adobe experience manager 6.5 ltsOct 13, 2026

+165 moreAll records of the vendor

SAP · October 13

20 · 0 KEV · 4 critical
  • CVE-2026-89111
    40Plan

    OAuth2 SSRF vulnerability in SAP Cloud SDK for Python

    CriticalCVSS 10.0No exploitEPSS 0%

    sap_se · sap cloudOct 13, 2026

  • CVE-2026-89107
    39Monitor

    Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules)

    CriticalCVSS 9.9No exploitEPSS 0%

    sap_se · sap s/4hana (manage substitution/validation rules)Oct 13, 2026

  • CVE-2026-89110
    39Monitor

    Broken Access Control in SAP NetWeaver Visual Composer

    CriticalCVSS 9.9No exploitEPSS 0%

    sap_se · sap netweaver visual composerOct 13, 2026

  • CVE-2026-89108
    36Monitor

    Missing Authorization check in SAP Manufacturing Integration and Intelligence (Configuration Service)

    CriticalCVSS 9.1No exploitEPSS 0%

    sap_se · sap manufacturing integration and intelligence (configuration service)Oct 13, 2026

  • CVE-2026-89113
    35Monitor

    SQL Injection vulnerability in SAP Commerce Cloud (OOTB Code)

    HighCVSS 8.8No exploitEPSS 0%

    sap_se · sap commerce cloud (ootb code)Oct 13, 2026

  • CVE-2026-58249
    30Monitor

    Memory Corruption vulnerability in SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager)

    HighCVSS 7.5Proof of conceptEPSS 0%

    sap_se · sap netweaver and sap web dispatcher (internet communication manager)Oct 13, 2026

  • CVE-2026-89120
    28Monitor

    Missing authorization check in SAP ABAP Platform

    HighCVSS 7.1No exploitEPSS 0%

    sap_se · sap abap platformOct 13, 2026

  • CVE-2026-76972
    26Monitor

    Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence

    MediumCVSS 6.5No exploitEPSS 0%

    sap_se · sap manufacturing integration and intelligenceOct 13, 2026

  • CVE-2026-89112
    26Monitor

    Broken Access Control in CLA-Assistant � CLA Signature PII Disclosure

    MediumCVSS 6.5No exploitEPSS 0%

    sap_se · cla-assistantOct 13, 2026

  • CVE-2026-76975
    24Monitor

    Cross-Site Scripting (XSS) vulnerability in SAPUI5 (Support Assistant Overlay)

    MediumCVSS 6.1No exploitEPSS 0%

    sap_se · sapui5 (support assistant overlay)Oct 13, 2026

  • CVE-2026-89117
    24Monitor

    Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal

    MediumCVSS 6.1No exploitEPSS 0%

    sap_se · sap netweaver enterprise portalOct 13, 2026

  • CVE-2026-89122
    24Monitor

    Open Redirect Vulnerability in SAP NetWeaver Enterprise Portal

    MediumCVSS 6.1No exploitEPSS 0%

    sap_se · sap netweaver enterprise portalOct 13, 2026

+8 moreAll records of the vendor

Siemens · October 13

32 · 0 KEV · 3 critical
  • CVE-2026-63350
    37Monitor

    Affected devices do not properly restrict executable content contained in imported trace files.

    CriticalCVSS 9.4No exploitEPSS 0%

    siemens · simatic drive controller cpu 1504d tfOct 13, 2026

  • CVE-2026-63353
    37Monitor

    Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page.

    CriticalCVSS 9.4No exploitEPSS 0%

    siemens · simatic drive controller cpu 1504d tfOct 13, 2026

  • CVE-2026-63354
    37Monitor

    Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the T

    CriticalCVSS 9.4No exploitEPSS 0%

    siemens · simatic drive controller cpu 1504d tfOct 13, 2026

  • CVE-2026-102073
    35Monitor

    A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (

    HighCVSS 8.8No exploitEPSS 0%

    siemens · apogee mbc (ppc) (bacnet)Oct 13, 2026

  • CVE-2026-44415
    35Monitor

    Affected systems do not properly restrict access to internal APIs and paths for authenticated users.

    HighCVSS 8.9No exploitEPSS 0%

    siemens · industrial edge device kit - arm64 v1.10Oct 13, 2026

  • CVE-2026-102074
    34Monitor

    A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (

    HighCVSS 8.7No exploitEPSS 0%

    siemens · apogee mbc (ppc) (bacnet)Oct 13, 2026

  • CVE-2026-102075
    34Monitor

    A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (

    HighCVSS 8.7No exploitEPSS 0%

    siemens · apogee mbc (ppc) (bacnet)Oct 13, 2026

  • CVE-2026-102076
    34Monitor

    A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (

    HighCVSS 8.7No exploitEPSS 0%

    siemens · apogee mbc (ppc) (bacnet)Oct 13, 2026

  • CVE-2026-59241
    34Monitor

    A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC

    HighCVSS 8.7No exploitEPSS 0%

    siemens · simatic wincc v7.5Oct 13, 2026

  • CVE-2026-85114
    34Monitor

    A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61).

    HighCVSS 8.7No exploitEPSS 0%

    siemens · .net client library for simatic s7 webserver apiOct 13, 2026

  • CVE-2026-89196
    34Monitor

    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

    HighCVSS 8.7No exploitEPSS 0%

    siemens · ruggedcom crossbowOct 13, 2026

  • CVE-2026-89197
    34Monitor

    A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0).

    HighCVSS 8.7No exploitEPSS 0%

    siemens · ruggedcom crossbowOct 13, 2026

+20 moreAll records of the vendor

Schneider Electric · October 13

1 · 0 KEV · 0 critical
  • CVE-2026-102250
    34Monitor

    CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an autho

    HighCVSS 8.6No exploitEPSS 0%

    schneider electric · sage rtu 1410Oct 13, 2026

All records of the vendor

Oracle (Critical Patch Update) · October 20

400 · 0 KEV · 65 critical
  • CVE-2026-101809
    40Plan

    Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).

    CriticalCVSS 10.0No exploitEPSS 0%

    oracle corporation · workflow6 days ago

  • CVE-2026-87337
    40Plan

    Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

    CriticalCVSS 10.0No exploitEPSS 0%

    oracle corporation · oracle access manager6 days ago

  • CVE-2026-91216
    40Plan

    Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).

    CriticalCVSS 10.0No exploitEPSS 0%

    oracle corporation · oracle soa suite6 days ago

  • CVE-2026-91221
    40Plan

    Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer).

    CriticalCVSS 10.0No exploitEPSS 0%

    oracle corporation · oracle soa suite6 days ago

  • CVE-2026-91231
    40Plan

    Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters).

    CriticalCVSS 10.0No exploitEPSS 0%

    oracle corporation · oracle soa suite6 days ago

  • CVE-2026-91299
    40Plan

    Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).

    CriticalCVSS 10.0No exploitEPSS 0%

    oracle corporation · jd edwards enterpriseone orchestrator6 days ago

  • CVE-2026-101446
    39Monitor

    Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

    CriticalCVSS 9.9No exploitEPSS 0%

    oracle corporation · siebel crm cloud applications6 days ago

  • CVE-2026-101484
    39Monitor

    Vulnerability in Oracle Secure Backup (component: Backup and Restore).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle corporation · oracle secure backup6 days ago

  • CVE-2026-101499
    39Monitor

    Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle corporation · oracle webcenter sites6 days ago

  • CVE-2026-101501
    39Monitor

    Vulnerability in Oracle Trusted Answer Search (component: PLSQL package).

    CriticalCVSS 9.9No exploitEPSS 0%

    oracle corporation · oracle trusted answer search6 days ago

  • CVE-2026-101503
    39Monitor

    Vulnerability in Oracle Trusted Answer Search (component: PLSQL package).

    CriticalCVSS 9.9No exploitEPSS 0%

    oracle corporation · oracle trusted answer search6 days ago

  • CVE-2026-101521
    39Monitor

    Vulnerability in Oracle APEX (component: General).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle corporation · oracle apex6 days ago

+388 moreAll records of the vendor