October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,937
Critical
3,121
High
7,064
Medium
6,901
Low
608
Severity not reported
4,243
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-34634 ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability tha... |
high | 8.6 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-20 |
| CVE-2026-71385 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
high | 8.4 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-20 |
| CVE-2026-75748 ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability tha... |
high | 7.6 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-20 |
| CVE-2026-75995 ColdFusion is affected by an Improper Input Validation vulnerability that could... |
high | 8.4 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-20 |
| CVE-2026-76001 ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability tha... |
high | 7.1 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-20 |
| CVE-2026-83966 Substance3D - Sampler is affected by an out-of-bounds write vulnerability that c... |
high | 7.8 | — | Adobe / substance 3d sampler | 2026-10-13 | 2026-10-20 |
| CVE-2026-83965 Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability... |
high | 7.8 | — | Adobe / substance 3d sampler | 2026-10-13 | 2026-10-20 |
| CVE-2026-105898 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
high | 8.2 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-20 |
| CVE-2026-103843 Substance3D - Stager is affected by a Use After Free vulnerability that could re... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-20 |
| CVE-2026-103842 Substance3D - Stager is affected by an out-of-bounds read vulnerability when par... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-20 |
| CVE-2026-103841 Substance3D - Stager is affected by an out-of-bounds read vulnerability when par... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-20 |
| CVE-2026-103840 Substance3D - Stager is affected by an out-of-bounds read vulnerability when par... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-20 |
| CVE-2026-103839 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103838 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103837 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103836 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103835 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103834 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103833 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103832 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103830 Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-95633 CAI Content Credentials is affected by an Improper Verification of Cryptographic... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-17 |
| CVE-2026-106623 ColdFusion is affected by an Incorrect Authorization vulnerability that could le... |
high | 7.5 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-17 |
| CVE-2026-100113 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-17 |
| CVE-2026-100118 CAI Content Credentials is affected by an Improper Certificate Validation vulner... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-17 |
| CVE-2026-100123 CAI Content Credentials is affected by an Improper Certificate Validation vulner... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-17 |
| CVE-2026-105994 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
high | 7.7 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-106089 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
high | 8.8 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-106090 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
high | 8.8 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-105901 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
high | 8.8 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-105900 ColdFusion is affected by an Improper Input Validation vulnerability that could... |
high | 7.5 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-105897 ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability tha... |
high | 8.6 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-106614 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
high | 7.8 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-106615 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
high | 8.8 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-106613 ColdFusion is affected by an Improper Input Validation vulnerability that could... |
high | 8.8 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-106616 ColdFusion is affected by an Improper Restriction of XML External Entity Referen... |
high | 8.6 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-106617 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
high | 8.8 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-97312 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-16 |
| CVE-2026-104348 Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-16 |
| CVE-2026-104347 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-16 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.