October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,410
Critical
3,098
High
6,954
Medium
6,692
Low
597
Severity not reported
4,069
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (671), google (410), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-97420 In the Linux kernel, the following vulnerability has been resolved:
bpf: NUL-te... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97427 In the Linux kernel, the following vulnerability has been resolved:
drm/amd/pm:... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97430 In the Linux kernel, the following vulnerability has been resolved:
xhci: Preve... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97434 In the Linux kernel, the following vulnerability has been resolved:
dpaa2-switc... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97435 In the Linux kernel, the following vulnerability has been resolved:
net: dsa: s... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97411 In the Linux kernel, the following vulnerability has been resolved:
net: ibm: e... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97416 In the Linux kernel, the following vulnerability has been resolved:
btrfs: bala... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97418 In the Linux kernel, the following vulnerability has been resolved:
ALSA: es18x... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93822 In the Linux kernel, the following vulnerability has been resolved:
PCI: iproc:... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93824 In the Linux kernel, the following vulnerability has been resolved:
tls: reject... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93825 In the Linux kernel, the following vulnerability has been resolved:
spi: Add NU... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97407 In the Linux kernel, the following vulnerability has been resolved:
ASoC: rockc... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97408 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93814 In the Linux kernel, the following vulnerability has been resolved:
spi: core:... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93815 In the Linux kernel, the following vulnerability has been resolved:
net: au1000... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93819 In the Linux kernel, the following vulnerability has been resolved:
PCI: mediat... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93820 In the Linux kernel, the following vulnerability has been resolved:
PCI: rockch... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93821 In the Linux kernel, the following vulnerability has been resolved:
PCI: altera... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93803 In the Linux kernel, the following vulnerability has been resolved:
wifi: libip... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93805 In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93807 In the Linux kernel, the following vulnerability has been resolved:
wifi: rsi:... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93808 In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-a... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93811 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: Fix... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93812 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93795 In the Linux kernel, the following vulnerability has been resolved:
blk-cgroup:... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93797 In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwi... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93800 In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93802 In the Linux kernel, the following vulnerability has been resolved:
wifi: rsi:... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93785 In the Linux kernel, the following vulnerability has been resolved:
cifs: valid... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93788 In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwi... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93789 In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwi... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93286 In the Linux kernel, the following vulnerability has been resolved:
net: applet... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93781 In the Linux kernel, the following vulnerability has been resolved:
scsi: core:... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93783 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93784 In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-19445 A remote, unauthenticated TLS client can make a server crash or call
through a f... |
not reported | — | — | — | 2026-09-30 | 2026-10-03 |
| CVE-2026-104886 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-104887 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-71448 : Insecure Default Initialization of Resource vulnerability in Johnson Controls... |
not reported | — | — | — | 2026-10-01 | 2026-10-02 |
| CVE-2026-71453 - External Control of File Name or Path vulnerability in Johnson Controls EasyIO... |
not reported | — | — | — | 2026-10-01 | 2026-10-02 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.