October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,639
Critical
3,114
High
7,009
Medium
6,780
Low
599
Severity not reported
4,137
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-89287 The ASPL Product Quotation WordPress plugin through 1.1.0 does not sanitize and... |
high | 8.6 | — | — | 2026-10-11 | 2026-10-13 |
| CVE-2026-89297 The Loja Automática WordPress plugin through 1.0.0 does not properly sanitize an... |
high | 8.6 | — | — | 2026-10-11 | 2026-10-13 |
| CVE-2026-89299 The WP Verify API WordPress plugin through 1.0.0 does not properly sanitize and... |
high | 8.6 | — | — | 2026-10-11 | 2026-10-13 |
| CVE-2026-89302 The Post Voting System WordPress plugin through 1.0 does not properly sanitize a... |
high | 8.6 | — | — | 2026-10-11 | 2026-10-13 |
| CVE-2026-91829 The Subscribe to Comments WordPress plugin before 2.3.3 does not properly valida... |
high | 7.1 | — | — | 2026-10-11 | 2026-10-13 |
| CVE-2026-96227 The Piotnet Forms WordPress plugin through 1.0.30 does not authenticate or valid... |
high | 8.8 | — | — | 2026-10-11 | 2026-10-13 |
| CVE-2026-65180 NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attac... |
high | 7.8 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-65101 NVIDIA AIStore for Linux contains a vulnerability in the distributed sort compon... |
high | 8.6 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-65103 NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-s... |
high | 8.1 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-65104 NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, wher... |
high | 7.1 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-65110 NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an atta... |
high | 7.8 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-65141 NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval... |
high | 7.8 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-65148 NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-65161 NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an un... |
high | 7.5 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-65164 NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort ar... |
high | 8.1 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-65170 NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend... |
high | 8.6 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-65172 NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnera... |
high | 8.6 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-85234 A flaw was found in tftp-hpa. |
high | 7.5 | — | — | 2026-09-15 | 2026-10-13 |
| CVE-2026-84315 Nginx UI is a web user interface for the Nginx web server. |
high | 8.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-109229 SGLang through 0.5.21 contains a denial of service vulnerability that disables P... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-105464 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Win... |
high | 8.8 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-105465 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privil... |
high | 8.8 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-18166 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Win... |
high | 7.7 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-105052 IBM Maximo Application Suite 8.10, 8.11, 9.0, 9.1, and 9.2 could allow a remote... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-18517 IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and... |
high | 7.7 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-75881 IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-78673 IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-96261 IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerab... |
high | 7.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-96262 IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerab... |
high | 8.2 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-96263 IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110... |
high | 8.2 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-96264 IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerab... |
high | 8.2 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-96265 IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerab... |
high | 8.2 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-96266 IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerab... |
high | 8.2 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-90911 IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-90912 IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cau... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-90921 IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-102627 IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authen... |
high | 8.8 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-75095 IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-75782 IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker t... |
high | 7.8 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-93891 IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authen... |
high | 7.6 | — | — | 2026-10-12 | 2026-10-13 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.