October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,927
Critical
3,121
High
7,064
Medium
6,895
Low
608
Severity not reported
4,239
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2025-50950 Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the Mo... |
high | 7.5 | — | Audiofile / audiofile | 2025-10-23 | 2026-10-27 |
| CVE-2025-60570 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the... |
high | 7.5 | — | Dlink / dir-600l firmware | 2025-10-24 | 2026-10-27 |
| CVE-2025-60549 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the... |
high | 7.5 | — | Dlink / dir-600l firmware | 2025-10-24 | 2026-10-27 |
| CVE-2025-60550 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the... |
high | 7.5 | — | Dlink / dir-600l firmware | 2025-10-24 | 2026-10-27 |
| CVE-2025-60552 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the... |
high | 7.5 | — | Dlink / dir-600l firmware | 2025-10-24 | 2026-10-27 |
| CVE-2025-60424 A lack of rate limiting in the OTP verification component of Nagios Fusion v2024... |
high | 7.6 | — | Nagios / fusion | 2025-10-27 | 2026-10-27 |
| CVE-2025-61196 An issue in BusinessNext CRMnext v.10.8.3.0 allows a remote attacker to execute... |
high | 8.8 | — | — | 2025-10-30 | 2026-10-27 |
| CVE-2025-61498 A buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows... |
high | 7.5 | — | Tenda / ac8 firmware | 2025-10-30 | 2026-10-27 |
| CVE-2025-60749 DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.... |
high | 7.8 | — | — | 2025-10-31 | 2026-10-27 |
| CVE-2025-63561 Summer Pearl Group Vacation Rental Management Platform prior to 1.0.2 is suscept... |
high | 7.5 | — | Summerpearlgroup / vacation rental management platform | 2025-10-31 | 2026-10-27 |
| CVE-2025-63248 DWSurvey 6.14.0 is vulnerable to Incorrect Access Control. |
high | 7.5 | — | Diaowen / dwsurvey | 2025-11-05 | 2026-10-27 |
| CVE-2025-63417 A Stored Cross-Site Scripting (XSS) vulnerability in the chat functionality of t... |
high | 7.2 | — | Selfbest / selfbest | 2025-11-05 | 2026-10-27 |
| CVE-2026-58083 While the kernel was copying knotes during fork, a knote with a timer-based filt... |
high | 8.4 | — | Freebsd / freebsd | 2026-08-19 | 2026-10-27 |
| CVE-2026-58085 After dispatching a decrypt operation to OCF and receiving the result, the wg(4)... |
high | 7.5 | — | Freebsd / freebsd | 2026-08-19 | 2026-10-27 |
| CVE-2026-58086 As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was alway... |
high | 8.1 | — | Freebsd / freebsd | 2026-08-19 | 2026-10-27 |
| CVE-2026-58087 The GETALL and SETALL commands in semctl(2) recorded the number of semaphores in... |
high | 7.8 | — | Freebsd / freebsd | 2026-08-19 | 2026-10-27 |
| CVE-2026-58088 The ELF core dump code counted the number of dumpable VM map entries, allocated... |
high | 7.4 | — | Freebsd / freebsd | 2026-08-19 | 2026-10-27 |
| CVE-2026-75589 Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINT... |
high | 7.5 | — | — | 2026-08-19 | 2026-10-27 |
| CVE-2026-51367 An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker t... |
high | 7.5 | — | — | 2026-08-19 | 2026-10-27 |
| CVE-2026-14970 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing dur... |
high | 7.5 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-15061 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 's nimesis registration service co... |
high | 8.2 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-15078 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker... |
high | 8.1 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-16686 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to a... |
high | 8.2 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-16690 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to c... |
high | 7.5 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-16703 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to ga... |
high | 7.8 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-16706 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to c... |
high | 7.5 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-16814 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e... |
high | 8.8 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-91506 Vulnerability in the Workflow product of Oracle E-Business Suite (component: Wor... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-87408 Vulnerability in the Oracle Applications Framework product of Oracle E-Business... |
high | 8.7 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-83379 Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusi... |
high | 8.7 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-116612 A flaw was found in GStreamer Editing Services (gst-editing-services). |
high | 7.8 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-101700 Vulnerability in the Oracle Application Object Library product of Oracle E-Busin... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101704 Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business S... |
high | 8.2 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101824 Vulnerability in the Document Management and Collaboration product of Oracle E-B... |
high | 8.7 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101648 Vulnerability in the Oracle Partner Management product of Oracle E-Business Suit... |
high | 8.4 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101665 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Su... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101672 Vulnerability in the Oracle Call Center Technology product of Oracle E-Business... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101684 Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of O... |
high | 8.3 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-82230 Uncontrolled recursion in the mcpack2pb component in Apache bRPC (version < 1.18... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-26 |
| CVE-2026-91632 Vulnerability in Oracle Essbase (component: Security). |
high | 7.7 | — | Oracle / essbase | 2026-10-20 | 2026-10-26 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.