October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,932
Critical
3,121
High
7,064
Medium
6,897
Low
608
Severity not reported
4,242
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2025-36250 IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM... |
critical | 9.8 | — | Ibm / vios | 2025-11-13 | 2026-10-18 |
| CVE-2025-36251 IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementat... |
critical | 9.8 | — | Ibm / vios | 2025-11-13 | 2026-10-18 |
| CVE-2025-13189 A vulnerability has been found in D-Link DIR-816L 2_06_b09_beta. |
critical | 9.8 | — | Dlink / dir-816l firmware | 2025-11-15 | 2026-10-18 |
| CVE-2025-13191 A vulnerability was determined in D-Link DIR-816L 2_06_b09_beta. |
critical | 9.8 | — | Dlink / dir-816l firmware | 2025-11-15 | 2026-10-18 |
| CVE-2025-13233 A vulnerability has been found in itsourcecode Inventory Management System 1.0. |
critical | 9.8 | — | Janobe / inventory management system | 2025-11-16 | 2026-10-18 |
| CVE-2025-13234 A vulnerability was found in itsourcecode Inventory Management System 1.0. |
critical | 9.8 | — | Janobe / inventory management system | 2025-11-16 | 2026-10-18 |
| CVE-2025-13235 A vulnerability was determined in itsourcecode Inventory Management System 1.0. |
critical | 9.8 | — | Janobe / inventory management system | 2025-11-16 | 2026-10-18 |
| CVE-2025-13236 A vulnerability was identified in itsourcecode Inventory Management System 1.0. |
critical | 9.8 | — | Janobe / inventory management system | 2025-11-16 | 2026-10-18 |
| CVE-2025-13237 A security flaw has been discovered in itsourcecode Inventory Management System... |
critical | 9.8 | — | Janobe / inventory management system | 2025-11-16 | 2026-10-18 |
| CVE-2025-13240 A vulnerability was detected in code-projects Student Information System 2.0. |
critical | 9.8 | — | Fabian / student information system | 2025-11-16 | 2026-10-18 |
| CVE-2025-13241 A flaw has been found in code-projects Student Information System 2.0. |
critical | 9.8 | — | Fabian / student information system | 2025-11-16 | 2026-10-18 |
| CVE-2025-13242 A vulnerability has been found in code-projects Student Information System 2.0. |
critical | 9.8 | — | Fabian / student information system | 2025-11-16 | 2026-10-18 |
| CVE-2025-13248 A weakness has been identified in SourceCodester Patients Waiting Area Queue Man... |
critical | 9.8 | — | Pamzey / patients waiting area queue management system | 2025-11-16 | 2026-10-18 |
| CVE-2025-13305 A weakness has been identified in D-Link DWR-M920, DWR-M921, DWR-M960, DIR-822K... |
critical | 9.8 | — | Dlink / dir-825m firmware | 2025-11-17 | 2026-10-18 |
| CVE-2025-13323 A security flaw has been discovered in code-projects Simple Pizza Ordering Syste... |
critical | 9.8 | — | Carmelo / simple pizza ordering system | 2025-11-18 | 2026-10-18 |
| CVE-2025-41346 Faulty authorization control in software WinPlus v24.11.27 by Informática del Es... |
critical | 9.8 | — | Iest / winplus | 2025-11-18 | 2026-10-18 |
| CVE-2025-41347 Unlimited upload vulnerability for dangerous file types in WinPlus v24.11.27 fro... |
critical | 9.8 | — | Iest / winplus | 2025-11-18 | 2026-10-18 |
| CVE-2025-13344 A weakness has been identified in SourceCodester Train Station Ticketing System... |
critical | 9.8 | — | Oretnom23 / train station ticketing system | 2025-11-18 | 2026-10-18 |
| CVE-2025-41348 SQL injection vulnerability in WinPlus v24.11.27 by Informática del Este. |
critical | 9.8 | — | Iest / winplus | 2025-11-18 | 2026-10-18 |
| CVE-2025-64325 Emby Server is a personal media server. |
critical | 9.0 | — | Emby / emby | 2025-11-18 | 2026-10-18 |
| CVE-2025-13396 A weakness has been identified in code-projects Courier Management System 1.0. |
critical | 9.8 | — | Carmelogarcia / courier management system | 2025-11-19 | 2026-10-18 |
| CVE-2025-13400 A vulnerability was detected in Tenda CH22 1.0.0.1. |
critical | 9.8 | — | Tenda / ch22 firmware | 2025-11-19 | 2026-10-18 |
| CVE-2025-34328 AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and inclu... |
critical | 9.8 | — | Audiocodes / fax server | 2025-11-19 | 2026-10-18 |
| CVE-2025-34329 AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and inclu... |
critical | 9.8 | — | Audiocodes / fax server | 2025-11-19 | 2026-10-18 |
| CVE-2025-13315 Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw... |
critical | 9.8 | — | Lynxtechnology / twonky server | 2025-11-19 | 2026-10-18 |
| CVE-2025-65025 esm.sh is a nobuild content delivery network(CDN) for modern web development. |
critical | 9.8 | — | Esm / esm.sh | 2025-11-19 | 2026-10-18 |
| CVE-2025-65026 esm.sh is a nobuild content delivery network(CDN) for modern web development. |
critical | 9.6 | — | Esm / esm.sh | 2025-11-19 | 2026-10-18 |
| CVE-2025-65099 Claude Code is an agentic coding tool. |
critical | 9.8 | — | Anthropic / claude code | 2025-11-19 | 2026-10-18 |
| CVE-2025-13410 A vulnerability has been found in Campcodes Retro Basketball Shoes Online Store... |
critical | 9.8 | — | Campcodes / retro basketball shoes online store | 2025-11-19 | 2026-10-18 |
| CVE-2025-13411 A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0. |
critical | 9.8 | — | Campcodes / retro basketball shoes online store | 2025-11-19 | 2026-10-18 |
| CVE-2025-13420 A weakness has been identified in itsourcecode Human Resource Management System... |
critical | 9.8 | — | Angeljudesuarez / human resource management system | 2025-11-19 | 2026-10-18 |
| CVE-2025-13421 A security vulnerability has been detected in itsourcecode Human Resource Manage... |
critical | 9.8 | — | Angeljudesuarez / human resource management system | 2025-11-19 | 2026-10-18 |
| CVE-2025-13422 A vulnerability was detected in freeprojectscodes Sports Club Management System... |
critical | 9.8 | — | Darkseid / sports club management system | 2025-11-20 | 2026-10-18 |
| CVE-2025-13424 A vulnerability has been found in Campcodes Supplier Management System 1.0. |
critical | 9.8 | — | Campcodes / supplier management system | 2025-11-20 | 2026-10-18 |
| CVE-2025-13442 A security vulnerability has been detected in UTT 进取 750W up to 3.2.2-191225. |
critical | 9.8 | — | Utt / 750w firmware | 2025-11-20 | 2026-10-18 |
| CVE-2025-13445 A flaw has been found in Tenda AC21 16.03.08.16. |
critical | 9.8 | — | Tenda / ac21 firmware | 2025-11-20 | 2026-10-18 |
| CVE-2025-13446 A vulnerability has been found in Tenda AC21 16.03.08.16. |
critical | 9.8 | — | Tenda / ac21 firmware | 2025-11-20 | 2026-10-18 |
| CVE-2025-13449 A vulnerability was found in code-projects Online Shop Project 1.0. |
critical | 9.8 | — | Oretnom23 / online shop project | 2025-11-20 | 2026-10-18 |
| CVE-2025-13451 A vulnerability was identified in SourceCodester Online Shop Project 1.0. |
critical | 9.8 | — | Oretnom23 / online shop project | 2025-11-20 | 2026-10-18 |
| CVE-2025-40604 Download of Code Without Integrity Check Vulnerability in the SonicWall Email Se... |
critical | 9.8 | — | Sonicwall / email security appliance 5000 firmware | 2025-11-20 | 2026-10-18 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.