Microsoft’s October 2026 Patch Tuesday addresses 1407 CVEs (CVE-2026-96951)

2026-10-14T08:52:11Z•685e9912c67afde07356ba4f1743b07477af7f5a7c40a6cd6e753371b0564d8b

CVE-2026-88771CVE-2026-88772CVE-2026-88779CVE-2026-96951AI securityCitrix NetScalerMicrosoft Patch TuesdayOT securityOctober 2026Oracle Critical Security Patch Updatecritical infrastructurecritical vulnerabilitiesexploited in the wildnation-state threatspatch managementvulnerability managementzero-day

Open source link →

What happened

Tenable reports that Microsoft’s October 2026 Patch Tuesday fixed 1,407 CVEs across 301 products, including 69 critical vulnerabilities and two zero-days, one exploited in the wild. The feed also highlights actively exploited Citrix NetScaler zero-days (CVE-2026-88771, CVE-2026-88772 and CVE-2026-88779), Oracle’s 672-CVE September 2026 update, and broader risks involving critical infrastructure, AI agents, shadow AI applications, and OT environments.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID: tenable_blog
Record identifier: 685e9912c67afde07356ba4f1743b07477af7f5a7c40a6cd6e753371b0564d8b
Enrichment time: 2026-10-14T08:52:11Z
AI-assisted enrichment: Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

← Back to published records