October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,937
Critical
3,121
High
7,064
Medium
6,901
Low
608
Severity not reported
4,243
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-72494 In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma:... |
critical | 9.8 | — | — | 2026-08-15 | 2026-10-30 |
| CVE-2026-72463 In the Linux kernel, the following vulnerability has been resolved:
xfrm: Fix d... |
critical | 9.8 | — | — | 2026-08-15 | 2026-10-30 |
| CVE-2026-72398 In the Linux kernel, the following vulnerability has been resolved:
sctp: add I... |
critical | 9.8 | — | — | 2026-08-15 | 2026-10-30 |
| CVE-2026-72320 In the Linux kernel, the following vulnerability has been resolved:
netfilter:... |
critical | 9.1 | — | — | 2026-08-15 | 2026-10-30 |
| CVE-2026-72329 In the Linux kernel, the following vulnerability has been resolved:
net/liquidi... |
critical | 9.3 | — | — | 2026-08-15 | 2026-10-30 |
| CVE-2026-72200 In the Linux kernel, the following vulnerability has been resolved:
ntfs: detec... |
critical | 9.8 | — | — | 2026-08-15 | 2026-10-30 |
| CVE-2026-72288 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
critical | 9.3 | — | — | 2026-08-15 | 2026-10-30 |
| CVE-2026-72130 In the Linux kernel, the following vulnerability has been resolved:
nvmet-auth:... |
critical | 9.8 | — | — | 2026-08-15 | 2026-10-30 |
| CVE-2026-72098 In the Linux kernel, the following vulnerability has been resolved:
dm-verity:... |
critical | 9.8 | — | — | 2026-08-15 | 2026-10-30 |
| CVE-2026-68426 In the Linux kernel, the following vulnerability has been resolved:
xfrm: fix s... |
critical | 9.8 | — | — | 2026-08-10 | 2026-10-30 |
| CVE-2026-68381 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: pin... |
critical | 9.8 | — | — | 2026-08-10 | 2026-10-30 |
| CVE-2026-68083 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix... |
critical | 9.1 | — | — | 2026-08-10 | 2026-10-30 |
| CVE-2026-64392 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: use... |
critical | 9.1 | — | Linux / linux kernel | 2026-07-25 | 2026-10-30 |
| CVE-2026-64391 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: use... |
critical | 9.8 | — | Linux / linux kernel | 2026-07-25 | 2026-10-30 |
| CVE-2026-64320 In the Linux kernel, the following vulnerability has been resolved:
nvmet: fix... |
critical | 9.1 | — | Linux / linux kernel | 2026-07-25 | 2026-10-30 |
| CVE-2026-64319 In the Linux kernel, the following vulnerability has been resolved:
nvmet-auth:... |
critical | 9.1 | — | Linux / linux kernel | 2026-07-25 | 2026-10-30 |
| CVE-2026-64136 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
critical | 9.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-64025 In the Linux kernel, the following vulnerability has been resolved:
bpf, skmsg:... |
critical | 9.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63940 In the Linux kernel, the following vulnerability has been resolved:
KVM: SEV: I... |
critical | 9.3 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63825 In the Linux kernel, the following vulnerability has been resolved:
gcov: use a... |
critical | 9.8 | — | — | 2026-07-19 | 2026-10-30 |
| CVE-2026-53224 In the Linux kernel, the following vulnerability has been resolved:
sctp: valid... |
critical | 9.1 | — | Linux / linux kernel | 2026-06-25 | 2026-10-30 |
| CVE-2026-43414 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
critical | 9.8 | — | Linux / linux kernel | 2026-05-08 | 2026-10-30 |
| CVE-2026-43185 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix... |
critical | 9.8 | — | Linux / linux kernel | 2026-05-06 | 2026-10-30 |
| CVE-2026-43125 In the Linux kernel, the following vulnerability has been resolved:
dlm: valida... |
critical | 9.8 | — | Linux / linux kernel | 2026-05-06 | 2026-10-30 |
| CVE-2026-43083 In the Linux kernel, the following vulnerability has been resolved:
net: ioam6:... |
critical | 9.1 | — | Linux / linux kernel | 2026-05-06 | 2026-10-30 |
| CVE-2026-113812 Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle co... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2025-68809 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: vfs:... |
critical | 9.1 | — | — | 2026-01-13 | 2026-10-30 |
| CVE-2025-68745 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
critical | 9.8 | — | — | 2025-12-24 | 2026-10-30 |
| CVE-2024-53177 In the Linux kernel, the following vulnerability has been resolved:
smb: preven... |
critical | 9.8 | — | Linux / linux kernel | 2024-12-27 | 2026-10-30 |
| CVE-2024-53095 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
critical | 9.8 | — | Linux / linux kernel | 2024-11-21 | 2026-10-30 |
| CVE-2024-26828 In the Linux kernel, the following vulnerability has been resolved:
cifs: fix u... |
critical | 9.4 | — | Linux / linux kernel | 2024-04-17 | 2026-10-30 |
| CVE-2026-29063 Immutable.js provides many Persistent Immutable data structures. |
critical | 9.8 | — | Immutable-js / immutable | 2026-03-06 | 2026-10-30 |
| CVE-2026-86413 When using an *ambient user* in a first transfer doing Negotiate
authentication... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2026-86414 An HTTP proxy can trick libcurl into sending the origin's credentials (Basic
pas... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2026-87861 When using ambient user credentials, an HTTP request directed to one origin
may... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2026-87302 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2026-85165 n8n versions before 2.36.2 contain an expression sandbox bypass vulnerability wh... |
critical | 9.9 | — | N8n / n8n | 2026-09-03 | 2026-10-29 |
| CVE-2026-75913 CodeWhale (codewhale / codewhale-tui) versions >= 0.8.41 and < 0.8.64 contain an... |
critical | 9.3 | — | — | 2026-08-18 | 2026-10-29 |
| CVE-2026-82854 Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsa... |
critical | 9.8 | — | — | 2026-08-31 | 2026-10-29 |
| CVE-2026-6257 Vvveb CMS before 1.0.8.2 contains a remote code execution vulnerability in its m... |
critical | 9.1 | — | — | 2026-04-20 | 2026-10-29 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.