October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,928
Critical
3,121
High
7,064
Medium
6,896
Low
608
Severity not reported
4,239
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2023-7324 In the Linux kernel, the following vulnerability has been resolved:
scsi: ses:... |
high | 8.1 | — | — | 2025-10-29 | 2026-10-28 |
| CVE-2023-53965 SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability th... |
high | 7.8 | — | Sound4 / playout ula8 firmware | 2025-12-22 | 2026-10-28 |
| CVE-2023-53969 Screen SFT DAB 600/C firmware 1.9.3 contains a session management vulnerability... |
high | 7.5 | — | Dbbroadcast / sft dab 600\/c firmware | 2025-12-22 | 2026-10-28 |
| CVE-2023-53973 Zillya Total Security 3.0.2367.0 contains a privilege escalation vulnerability t... |
high | 7.8 | — | Zillya / total security | 2025-12-22 | 2026-10-28 |
| CVE-2023-54193 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
high | 7.8 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54198 In the Linux kernel, the following vulnerability has been resolved:
tty: fix ou... |
high | 7.8 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54200 In the Linux kernel, the following vulnerability has been resolved:
netfilter:... |
high | 7.8 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54201 In the Linux kernel, the following vulnerability has been resolved:
RDMA/efa: F... |
high | 7.8 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54202 In the Linux kernel, the following vulnerability has been resolved:
drm/i915: f... |
high | 7.8 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54206 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
high | 7.8 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54207 In the Linux kernel, the following vulnerability has been resolved:
HID: uclogi... |
high | 7.8 | — | Linux / linux kernel | 2025-12-30 | 2026-10-28 |
| CVE-2023-54210 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
high | 7.8 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54214 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
high | 8.8 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54216 In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e:... |
high | 7.8 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54219 In the Linux kernel, the following vulnerability has been resolved:
Revert "IB/... |
high | 7.5 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54220 In the Linux kernel, the following vulnerability has been resolved:
serial: 825... |
high | 7.8 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54227 In the Linux kernel, the following vulnerability has been resolved:
blk-mq: fix... |
high | 7.5 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54234 In the Linux kernel, the following vulnerability has been resolved:
scsi: mpi3m... |
high | 7.8 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-3634 In products of the MSE6 product-family by Festo a remote authenticated, low priv... |
high | 8.8 | — | — | 2026-04-16 | 2026-10-28 |
| CVE-2023-54345 Frappe Framework ERPNext 13.4.0 contains a sandbox escape vulnerability in Restr... |
high | 8.8 | — | Frappe / erpnext | 2026-05-05 | 2026-10-28 |
| CVE-2023-54346 WordPress Plugin Backup Migration 1.2.8 contains an information disclosure vulne... |
high | 7.5 | — | — | 2026-05-05 | 2026-10-28 |
| CVE-2023-54347 OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows a... |
high | 7.5 | — | Open-emr / openemr | 2026-05-05 | 2026-10-28 |
| CVE-2023-54348 ERPGo SaaS 3.9 contains a CSV injection vulnerability that allows authenticated... |
high | 8.8 | — | — | 2026-05-05 | 2026-10-28 |
| CVE-2023-42344 Alkacon OpenCms before 10.5.1 allows remote unauthenticated attackers to obtain... |
high | 7.3 | — | — | 2026-05-08 | 2026-10-28 |
| CVE-2023-42346 Alkacon OpenCms before 16 allows XXE when the refers to an external host. |
high | 7.5 | — | — | 2026-05-08 | 2026-10-28 |
| CVE-2023-27753 An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to... |
high | 8.0 | — | — | 2026-05-12 | 2026-10-28 |
| CVE-2023-54357 Joomla com_booking component 2.4.9 contains an information disclosure vulnerabil... |
high | 7.5 | — | Artio / book it\! | 2026-06-19 | 2026-10-28 |
| CVE-2023-37524 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due... |
high | 7.8 | — | Hcltech / traveler for microsoft outlook | 2026-06-27 | 2026-10-28 |
| CVE-2023-54366 SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, a... |
high | 8.8 | — | Surrealdb / surrealdb | 2026-07-18 | 2026-10-28 |
| CVE-2023-52356 A segment fault (SEGV) flaw was found in libtiff that could be triggered by pass... |
high | 7.5 | — | Debian / debian linux | 2024-01-25 | 2026-10-28 |
| CVE-2026-98096 In the Linux kernel, the following vulnerability has been resolved:
ipv6: sr: r... |
high | 7.4 | — | Linux / linux kernel | 2026-09-25 | 2026-10-28 |
| CVE-2026-98112 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix... |
high | 7.8 | — | Linux / linux kernel | 2026-09-25 | 2026-10-28 |
| CVE-2026-98111 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
high | 7.1 | — | Linux / linux kernel | 2026-09-25 | 2026-10-28 |
| CVE-2026-98110 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
high | 7.1 | — | Linux / linux kernel | 2026-09-25 | 2026-10-28 |
| CVE-2026-96626 Arcane is an interface for managing Docker containers, images, networks, and vol... |
high | 8.5 | — | — | 2026-10-16 | 2026-10-28 |
| CVE-2026-91343 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl... |
high | 8.6 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91353 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl... |
high | 8.6 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91355 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middl... |
high | 8.4 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91358 Vulnerability in the Oracle Business Process Management Suite product of Oracle... |
high | 8.2 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-91337 Vulnerability in the iProcurement product of Oracle E-Business Suite (component:... |
high | 7.4 | — | — | 2026-10-20 | 2026-10-28 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.