October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,932
Critical
3,121
High
7,064
Medium
6,897
Low
608
Severity not reported
4,242
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2025-12603 /etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.1... |
critical | 9.8 | — | Azure-access / blu-ic2 firmware | 2025-11-01 | 2026-10-18 |
| CVE-2025-12595 A weakness has been identified in Tenda AC23 16.03.07.52. |
critical | 9.8 | — | Tenda / ac23 firmware | 2025-11-02 | 2026-10-18 |
| CVE-2025-12596 A security vulnerability has been detected in Tenda AC23 16.03.07.52. |
critical | 9.8 | — | Tenda / ac23 firmware | 2025-11-02 | 2026-10-18 |
| CVE-2025-12597 A vulnerability was detected in SourceCodester Best House Rental Management Syst... |
critical | 9.8 | — | Mayurik / best house rental management system | 2025-11-02 | 2026-10-18 |
| CVE-2025-12598 A flaw has been found in SourceCodester Best House Rental Management System 1.0. |
critical | 9.8 | — | Mayurik / best house rental management system | 2025-11-02 | 2026-10-18 |
| CVE-2025-12604 A vulnerability has been found in itsourcecode Online Loan Management System 1.0... |
critical | 9.8 | — | Angeljudesuarez / online loan management system | 2025-11-02 | 2026-10-18 |
| CVE-2025-12605 A vulnerability was found in itsourcecode Online Loan Management System 1.0. |
critical | 9.8 | — | Angeljudesuarez / online loan management system | 2025-11-02 | 2026-10-18 |
| CVE-2025-12606 A vulnerability was determined in itsourcecode Online Loan Management System 1.0... |
critical | 9.8 | — | Angeljudesuarez / online loan management system | 2025-11-03 | 2026-10-18 |
| CVE-2025-12607 A vulnerability was identified in itsourcecode Online Loan Management System 1.0... |
critical | 9.8 | — | Angeljudesuarez / online loan management system | 2025-11-03 | 2026-10-18 |
| CVE-2025-12608 A security flaw has been discovered in itsourcecode Online Loan Management Syste... |
critical | 9.8 | — | Angeljudesuarez / online loan management system | 2025-11-03 | 2026-10-18 |
| CVE-2025-12611 A vulnerability was identified in Tenda AC21 16.03.08.16. |
critical | 9.8 | — | Tenda / ac21 firmware | 2025-11-03 | 2026-10-18 |
| CVE-2025-12612 A security flaw has been discovered in Campcodes School Fees Payment Management... |
critical | 9.8 | — | Campcodes / school fees payment management system | 2025-11-03 | 2026-10-18 |
| CVE-2025-12614 A weakness has been identified in SourceCodester Best House Rental Management Sy... |
critical | 9.8 | — | Mayurik / best house rental management system | 2025-11-03 | 2026-10-18 |
| CVE-2025-12617 A flaw has been found in itsourcecode Billing System 1.0. |
critical | 9.8 | — | Angeljudesuarez / billing system | 2025-11-03 | 2026-10-18 |
| CVE-2025-12618 A vulnerability has been found in Tenda AC8 16.03.34.06. |
critical | 9.8 | — | Tenda / ac8 firmware | 2025-11-03 | 2026-10-18 |
| CVE-2025-12619 A vulnerability was found in Tenda A15 15.13.07.13. |
critical | 9.8 | — | Tenda / a15 firmware | 2025-11-03 | 2026-10-18 |
| CVE-2025-12622 A vulnerability was determined in Tenda AC10 16.03.10.13. |
critical | 9.8 | — | Tenda / ac10 firmware | 2025-11-03 | 2026-10-18 |
| CVE-2025-12531 IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to an... |
critical | 9.1 | — | Ibm / infosphere information server | 2025-11-03 | 2026-10-18 |
| CVE-2025-54863 Radiometrics VizAir is vulnerable to exposure of the system's REST API key throu... |
critical | 9.8 | — | Radiometrics / vizair | 2025-11-04 | 2026-10-18 |
| CVE-2025-61945 Radiometrics VizAir is vulnerable to any remote attacker via access to the admin... |
critical | 9.8 | — | Radiometrics / vizair | 2025-11-04 | 2026-10-18 |
| CVE-2025-61956 Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for cri... |
critical | 9.8 | — | Radiometrics / vizair | 2025-11-04 | 2026-10-18 |
| CVE-2025-20358 A vulnerability in the Contact Center Express (CCX) Editor application of Cisco... |
critical | 9.8 | — | Cisco / unified contact center express | 2025-11-05 | 2026-10-18 |
| CVE-2025-45378 Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted... |
critical | 9.1 | — | Dell / cloudlink | 2025-11-05 | 2026-10-18 |
| CVE-2025-34299 Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthe... |
critical | 9.8 | — | Monstaftp / monsta ftp | 2025-11-07 | 2026-10-18 |
| CVE-2025-52425 An SQL injection vulnerability has been reported to affect QuMagie. |
critical | 9.8 | — | Qnap / qumagie | 2025-11-07 | 2026-10-18 |
| CVE-2025-12916 A vulnerability was determined in Sangfor Operation and Maintenance Security Man... |
critical | 9.8 | — | Sangfor / operation and maintenance security management system | 2025-11-09 | 2026-10-18 |
| CVE-2025-11892 An improper neutralization of input vulnerability was identified in GitHub Enter... |
critical | 9.6 | — | Github / enterprise server | 2025-11-10 | 2026-10-18 |
| CVE-2025-58360 OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerabil... |
critical | 9.8 | Listed | OSGeo / GeoServer | 2025-11-25 | 2026-10-18 |
| CVE-2025-64446 Fortinet FortiWeb Path Traversal Vulnerability |
critical | 9.8 | Listed | Fortinet / FortiWeb | 2025-11-14 | 2026-10-18 |
| CVE-2025-13057 A vulnerability was identified in Campcodes School Fees Payment Management Syste... |
critical | 9.8 | — | Campcodes / school fees payment management system | 2025-11-12 | 2026-10-18 |
| CVE-2025-13059 A weakness has been identified in SourceCodester Alumni Management System 1.0. |
critical | 9.8 | — | Oretnom23 / alumni management system | 2025-11-12 | 2026-10-18 |
| CVE-2025-13060 A security vulnerability has been detected in SourceCodester Survey Application... |
critical | 9.8 | — | Oretnom23 / survey application system | 2025-11-12 | 2026-10-18 |
| CVE-2025-13075 A vulnerability was detected in code-projects Responsive Hotel Site 1.0. |
critical | 9.8 | — | Fabian / responsive hotel site | 2025-11-12 | 2026-10-18 |
| CVE-2025-13076 A flaw has been found in code-projects Responsive Hotel Site 1.0. |
critical | 9.8 | — | Fabian / responsive hotel site | 2025-11-12 | 2026-10-18 |
| CVE-2025-59367 An authentication bypass vulnerability has been identified in certain DSL series... |
critical | 9.8 | — | Asus / dsl-ac51 firmware | 2025-11-13 | 2026-10-18 |
| CVE-2025-12762 pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnera... |
critical | 9.8 | — | Pgadmin / pgadmin 4 | 2025-11-13 | 2026-10-18 |
| CVE-2025-64741 Improper authorization handling in Zoom Workplace for Android before version 6.5... |
critical | 9.8 | — | Zoom / meeting software development kit | 2025-11-13 | 2026-10-18 |
| CVE-2025-13123 A flaw has been found in AMTT Hotel Broadband Operation System 1.0. |
critical | 9.8 | — | Amttgroup / hibos | 2025-11-13 | 2026-10-18 |
| CVE-2025-64709 Typebot is an open-source chatbot builder. |
critical | 9.9 | — | Typebot / typebot | 2025-11-13 | 2026-10-18 |
| CVE-2025-36236 IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM... |
critical | 9.1 | — | Ibm / vios | 2025-11-13 | 2026-10-18 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.