October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,927
Critical
3,121
High
7,064
Medium
6,895
Low
608
Severity not reported
4,239
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-98436 In the Linux kernel, the following vulnerability has been resolved:
accel/amdxd... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-26 |
| CVE-2023-7356 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
high | 8.8 | — | — | 2026-10-21 | 2026-10-26 |
| CVE-2026-7273 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability |
high | 8.8 | Listed | Zyxel / GS1900 Series Switches | 2026-06-16 | 2026-10-25 |
| CVE-2026-55255 Langflow Authorization Bypass Through User-Controlled Key Vulnerability |
high | 8.4 | Listed | Langflow / Langflow | 2026-06-23 | 2026-10-25 |
| CVE-2026-70197 Out-of-bounds write in .NET allows an unauthorized attacker to execute code over... |
high | 8.1 | — | — | 2026-10-13 | 2026-10-25 |
| CVE-2026-102870 Improper control of generation of code ('code injection') in ASP.NET Core allows... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-25 |
| CVE-2026-59822 BerriAI LiteLLM Improper Authentication Vulnerability |
high | 8.2 | Listed | BerriAI / LiteLLM | 2026-07-08 | 2026-10-25 |
| CVE-2026-15410 SonicWall SMA1000 Appliances Code Injection Vulnerability |
high | 7.2 | Listed | SonicWall / SMA1000 Appliances | 2026-07-14 | 2026-10-24 |
| CVE-2026-112863 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-112852 Deserialization of Untrusted Data vulnerability in ThemeREX Group Helion helion... |
high | 8.1 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-112850 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP... |
high | 8.1 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99064 In the Linux kernel, the following vulnerability has been resolved:
cipso: adju... |
high | 8.1 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99030 In the Linux kernel, the following vulnerability has been resolved:
net: skbuff... |
high | 7.5 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99042 In the Linux kernel, the following vulnerability has been resolved:
io_uring/ne... |
high | 8.4 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99046 In the Linux kernel, the following vulnerability has been resolved:
gve: fix XS... |
high | 7.5 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99050 In the Linux kernel, the following vulnerability has been resolved:
gpio: mpsse... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99051 In the Linux kernel, the following vulnerability has been resolved:
fsverity: R... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99011 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
high | 7.1 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99013 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99014 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99016 In the Linux kernel, the following vulnerability has been resolved:
riscv: fute... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99017 In the Linux kernel, the following vulnerability has been resolved:
riscv: erra... |
high | 7.0 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99018 In the Linux kernel, the following vulnerability has been resolved:
riscv: entr... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98991 In the Linux kernel, the following vulnerability has been resolved:
namespace:... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98995 In the Linux kernel, the following vulnerability has been resolved:
namespace:... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98999 In the Linux kernel, the following vulnerability has been resolved:
drm/xe: Fix... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98975 In the Linux kernel, the following vulnerability has been resolved:
xfs: stop e... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98976 In the Linux kernel, the following vulnerability has been resolved:
namespace:... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98978 In the Linux kernel, the following vulnerability has been resolved:
namespace:... |
high | 8.4 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98980 In the Linux kernel, the following vulnerability has been resolved:
namei: don'... |
high | 8.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98982 In the Linux kernel, the following vulnerability has been resolved:
namespace:... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98988 In the Linux kernel, the following vulnerability has been resolved:
namespace:... |
high | 8.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98952 In the Linux kernel, the following vulnerability has been resolved:
pfcp: make... |
high | 7.3 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98965 In the Linux kernel, the following vulnerability has been resolved:
ice: Restor... |
high | 7.5 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98974 In the Linux kernel, the following vulnerability has been resolved:
xfs: fix ex... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98927 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
high | 7.0 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98932 In the Linux kernel, the following vulnerability has been resolved:
EDAC/altera... |
high | 7.4 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98941 In the Linux kernel, the following vulnerability has been resolved:
ext4: don't... |
high | 7.0 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98550 In the Linux kernel, the following vulnerability has been resolved:
tipc: rejec... |
high | 7.5 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98555 In the Linux kernel, the following vulnerability has been resolved:
llc: fix sk... |
high | 7.5 | — | — | 2026-10-18 | 2026-10-24 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.