Patch releases
The vendor releases we track, with critical counts and linked impact reports. Critical means CVSS ≥ 9.0, or actively exploited (including CISA KEV), or rated Critical by the vendor.
Coming soonPer-release critical and exploited counts
| Vendor | Release | Critical | Exploited | Impacts |
|---|---|---|---|---|
| Cisco | Cisco PSIRT advisory, 2026-10-14 | — | — | 1 impact report(s) |
| Citrix | Security bulletin CTX697174, 2026-10-03/04 | — | — | 1 impact report(s) |
| Fortinet | PSIRT FG-IR-26-175, 2026-10-01 | — | — | 1 impact report(s) |
| Microsoft | October 2026 Patch Tuesday (2026-10-13) | — | — | 1 impact report(s) |
| Oracle | Critical Patch Update, October 2026 | — | — | 1 impact report(s) |
| Palo Alto | Security advisory, 2026-10-14 (updated 10-15) | — | — | 1 impact report(s) |
| SAP | SAP Security Patch Day, 2026-10-13 | — | — | 1 impact report(s) |
| VMware/Broadcom | October 2026 | — | — | 1 impact report(s) |
| Microsoft | October 2026 Patch Tuesday (Oct 13, 2026); issue originated in the Sept 22, 2026 preview | — | — | 1 impact report(s) |