October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,875
Critical
3,118
High
7,043
Medium
6,889
Low
606
Severity not reported
4,219
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-111366 cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability t... |
high | 7.2 | — | — | 2026-10-15 | 2026-10-16 |
| CVE-2026-111369 ClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in t... |
high | 7.1 | — | — | 2026-10-15 | 2026-10-16 |
| CVE-2026-45562 FreePBX is an open source IP PBX. |
high | 7.2 | — | Sangoma / freepbx | 2026-09-28 | 2026-10-16 |
| CVE-2026-54674 FreePBX is an open source IP PBX. |
high | 8.8 | — | Sangoma / freepbx | 2026-09-28 | 2026-10-16 |
| CVE-2026-54675 FreePBX is an open source IP PBX. |
high | 8.8 | — | Sangoma / freepbx | 2026-09-28 | 2026-10-16 |
| CVE-2026-69935 Use after free in Windows Storage allows an authorized attacker to elevate privi... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-16 |
| CVE-2026-54708 FreePBX is an open source IP PBX. |
high | 8.8 | — | Sangoma / freepbx | 2026-09-28 | 2026-10-16 |
| CVE-2026-69931 Concurrent execution using shared resource with improper synchronization ('race... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-16 |
| CVE-2026-92876 IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-89197 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). |
high | 8.8 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-85949 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 1... |
high | 8.1 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-85957 Affected Progress MarkLogic Server 11.x releases before 11.3.7 use a SAML parser... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-69926 Access of resource using incompatible type ('type confusion') in Desktop Window... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-16 |
| CVE-2026-78556 A vulnerability has been identified in Industrial Edge App Publisher (All versio... |
high | 7.4 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-76282 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.8 | — | Splunk / splunk | 2026-10-07 | 2026-10-16 |
| CVE-2026-76283 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 7.6 | — | Splunk / splunk | 2026-10-07 | 2026-10-16 |
| CVE-2026-63442 OPNsense is a FreeBSD based firewall and routing platform. |
high | 8.1 | — | — | 2026-10-15 | 2026-10-16 |
| CVE-2026-59241 A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATI... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-53582 OPNsense is a FreeBSD based firewall and routing platform. |
high | 7.1 | — | — | 2026-10-15 | 2026-10-16 |
| CVE-2026-111224 pfSense CE through 2.9.0 contains an OS command injection vulnerability in the O... |
high | 7.5 | — | — | 2026-10-15 | 2026-10-16 |
| CVE-2026-111229 pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in ser... |
high | 7.2 | — | — | 2026-10-15 | 2026-10-16 |
| CVE-2026-110858 GitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerabilit... |
high | 8.1 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-110863 Better Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3 contains an authentica... |
high | 8.1 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-110868 Renovate before 44.79.0 contains a server-side request forgery vulnerability tha... |
high | 8.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-110873 Heym from 0.0.55 before 0.0.121 contains a privilege escalation vulnerability th... |
high | 7.1 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-110623 Papermerge Core through 3.5.3 contains a missing authorization vulnerability in... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-110628 Kan 0.5.5 through 0.6.0 contains an unauthenticated server-side request forgery... |
high | 8.6 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-109221 The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress... |
high | 8.1 | — | — | 2026-10-16 | 2026-10-16 |
| CVE-2026-107659 The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vu... |
high | 7.5 | — | — | 2026-10-16 | 2026-10-16 |
| CVE-2026-105443 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insuff... |
high | 8.2 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-101020 An incorrect permission assignment for critical resource issue exists in AssetVi... |
high | 7.8 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-54710 FreePBX is an open source IP PBX. |
high | 8.8 | — | Sangoma / freepbx | 2026-09-28 | 2026-10-16 |
| CVE-2026-85334 Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthoriz... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-85333 Concurrent execution using shared resource with improper synchronization ('race... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-110859 GitPython before 3.2.0 contains an argument injection vulnerability in Head.chec... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-110867 Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows r... |
high | 8.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-110869 Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SM... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-111105 Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability. |
high | 7.0 | — | — | 2026-10-15 | 2026-10-16 |
| CVE-2026-69918 Heap-based buffer overflow in Windows Core Messaging allows an authorized attack... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-75600 FreePBX is an open source IP PBX. |
high | 8.8 | — | Sangoma / freepbx | 2026-09-28 | 2026-10-16 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.