October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,927
Critical
3,121
High
7,064
Medium
6,895
Low
608
Severity not reported
4,239
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-111124 CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in... |
high | 7.1 | — | Nasa / cfitsio | 2026-10-15 | 2026-10-26 |
| CVE-2026-110865 Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows r... |
high | 7.1 | — | — | 2026-10-14 | 2026-10-26 |
| CVE-2026-96867 Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-96868 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to el... |
high | 7.0 | — | Microsoft / windows 11 24h2 | 2026-10-13 | 2026-10-26 |
| CVE-2026-105009 Incorrect default permissions in Windows Server Update Service allows an authori... |
high | 7.5 | — | Microsoft / windows server 2012 | 2026-10-13 | 2026-10-26 |
| CVE-2026-94380 Weak Password Recovery Mechanism for Forgotten Password vulnerability in HAVELSA... |
high | 8.1 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-84823 A flaw was found in WildFly. |
high | 7.1 | — | — | 2026-10-16 | 2026-10-26 |
| CVE-2026-113345 Electronic delivery item Inspection Support System provided by Japan's Ministry... |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107897 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107898 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107899 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107900 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107894 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107895 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107896 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-103568 Concurrent execution using shared resource with improper synchronization ('race... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-103569 Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to d... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-105004 Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to el... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-105005 Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execu... |
high | 8.1 | — | Microsoft / windows 11 26h1 | 2026-10-13 | 2026-10-26 |
| CVE-2026-102218 Heap-based buffer overflow in Windows Universal Disk Format File System Driver (... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-102220 Use after free in Windows VHD miniport driver allows an authorized attacker to e... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-102225 Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to ex... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-102227 Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an aut... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-79887 A vulnerability in the web interface of AOS-8 could allow an unauthenticated rem... |
high | 8.1 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79888 A vulnerability in a certain web interface endpoint of AOS-8 devices could allow... |
high | 8.1 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79889 Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow... |
high | 8.1 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79890 There are command injection vulnerabilities in AOS-8 that could lead to unauthen... |
high | 8.1 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79891 A buffer overflow vulnerability exists in the command line interface of AOS-8 th... |
high | 8.1 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79892 A memory corruption vulnerability exists in AOS-8 that could allow an authentica... |
high | 7.8 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79893 Memory corruption vulnerabilities in AOS-10 could allow an unauthenticated remot... |
high | 7.5 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79894 An unauthenticated Denial-of-Service (DoS) vulnerability exists in the PAPI prot... |
high | 7.5 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79895 Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticat... |
high | 7.5 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79955 An unauthenticated memory corruption vulnerability exists in a service accessed... |
high | 7.5 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79956 A vulnerability in the CLI command handling of the AOS-8 web interface could all... |
high | 7.2 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-95704 A vulnerability in the web-based management interface of wireless network manage... |
high | 7.2 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-95705 Command injection vulnerabilities in the affected interface of AOS-8 could allow... |
high | 7.2 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-95706 Command injection vulnerabilities in the affected interface of AOS-8 could allow... |
high | 7.2 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-95707 A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an aut... |
high | 7.2 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-95708 Command injection vulnerabilities exist in the affected interface of AOS-10 that... |
high | 7.2 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-95709 Command injection vulnerabilities exist in the affected interface of AOS-10 that... |
high | 7.2 | — | — | 2026-10-22 | 2026-10-26 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.