October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,663
Critical
3,114
High
7,016
Medium
6,792
Low
599
Severity not reported
4,142
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-79824 A directory traversal vulnerability in HPE NonStop Python 3.x could allow attack... |
high | 8.0 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79825 A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution add... |
high | 7.1 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79826 A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may p... |
high | 7.1 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79827 A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-exe... |
high | 7.1 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79828 A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execu... |
high | 7.1 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79829 A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corrupti... |
high | 8.2 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79832 A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potenti... |
high | 7.6 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79833 A vulnerability in HPE NonStop ANSI SQLUTIL may allow a remote unauthenticated a... |
high | 7.5 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79834 A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticat... |
high | 7.4 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79837 A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to... |
high | 7.3 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-70256 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized at... |
high | 8.8 | — | Microsoft / 365 apps | 2026-10-13 | 2026-10-15 |
| CVE-2026-70257 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized at... |
high | 8.8 | — | Microsoft / 365 apps | 2026-10-13 | 2026-10-15 |
| CVE-2026-94444 Previously, a user operating inside of a malicious Go project that defines a bog... |
high | 7.8 | — | — | 2026-10-08 | 2026-10-15 |
| CVE-2026-94447 Previously, a user operating inside of a malicious Go project that defines a bog... |
high | 7.8 | — | — | 2026-10-08 | 2026-10-15 |
| CVE-2026-97032 HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK en... |
high | 7.5 | — | — | 2026-10-08 | 2026-10-15 |
| CVE-2026-92922 Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability... |
high | 8.1 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-91882 Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Inser... |
high | 8.6 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-92153 F´ (F Prime) is a framework that enables development and deployment of spaceflig... |
high | 7.1 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-92155 F´ (F Prime) is a framework that enables development and deployment of spaceflig... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-61843 FileRise is a self-hosted web-based file manager with multi-file upload, editing... |
high | 8.2 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-57490 FileRise is a self-hosted web-based file manager with multi-file upload, editing... |
high | 8.1 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-57492 FileRise is a self-hosted web-based file manager with multi-file upload, editing... |
high | 7.4 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-55681 WeGIA is a web manager for charitable institutions. |
high | 8.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-53574 EspoCRM is an open source customer relationship management application. |
high | 7.6 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-110025 A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. |
high | 7.3 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-110670 A vulnerability was found in cemtan sar2html 4.0.0. |
high | 7.3 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-110679 A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. |
high | 7.3 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-109520 A flaw has been found in Colorful iGameCenter 2.0.0.82. |
high | 8.8 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-109695 Insertion of Sensitive Information Into Sent Data vulnerability in WPManageNinja... |
high | 7.5 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-109702 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-109403 A vulnerability was determined in conductor-oss conductor up to 3.32.5. |
high | 7.3 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-108964 A vulnerability was found in SourceCodester Performance Indicator System 1.0. |
high | 7.3 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-108968 A weakness has been identified in SourceCodester Performance Indicator System 1.... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-108972 A vulnerability was found in SourceCodester Human Resource Management System 1.0... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-108916 A vulnerability was found in Edimax BR-6208AC 1.32. |
high | 8.3 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-108900 A vulnerability has been found in Exponent CMS up to 3.0.2patch2. |
high | 7.3 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-70282 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized at... |
high | 8.8 | — | Microsoft / 365 apps | 2026-10-13 | 2026-10-15 |
| CVE-2026-108571 A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. |
high | 7.3 | — | — | 2026-10-11 | 2026-10-15 |
| CVE-2026-105067 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti... |
high | 8.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-97012 Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized a... |
high | 8.8 | — | Microsoft / 365 apps | 2026-10-13 | 2026-10-15 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.