October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,929
Critical
3,121
High
7,064
Medium
6,897
Low
608
Severity not reported
4,239
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2016-1000027 Pivotal Spring Framework through 5.3.16 suffers from a potential remote code exe... |
critical | 9.8 | — | Vmware / spring framework | 2020-01-02 | 2026-10-07 |
| CVE-2025-14586 A vulnerability was determined in TOTOLINK X5000R 9.1.0cu.2089_B20211224. |
critical | 9.8 | — | Totolink / x5000r firmware | 2025-12-13 | 2026-10-07 |
| CVE-2025-14587 A vulnerability was identified in itsourcecode Online Pet Shop Management System... |
critical | 9.8 | — | Facebook-riares / online pet shop management system | 2025-12-13 | 2026-10-07 |
| CVE-2025-14588 A security flaw has been discovered in itsourcecode Student Management System 1.... |
critical | 9.8 | — | Angeljudesuarez / student management system | 2025-12-13 | 2026-10-07 |
| CVE-2025-14590 A security vulnerability has been detected in code-projects Prison Management Sy... |
critical | 9.8 | — | Carmelo / prison management system | 2025-12-13 | 2026-10-07 |
| CVE-2025-14619 A vulnerability was found in code-projects Student File Management System 1.0. |
critical | 9.8 | — | Fabian / student file management system | 2025-12-13 | 2026-10-07 |
| CVE-2025-14620 A vulnerability was determined in code-projects Student File Management System 1... |
critical | 9.8 | — | Fabian / student file management system | 2025-12-13 | 2026-10-07 |
| CVE-2025-36747 ShineLan-X contains a set of credentials for an FTP server was found within the... |
critical | 9.8 | — | Growatt / shine lan-x firmware | 2025-12-13 | 2026-10-07 |
| CVE-2025-36752 Growatt ShineLan-X communication dongle has an undocumented backup account with... |
critical | 9.8 | — | Growatt / shine lan-x firmware | 2025-12-13 | 2026-10-07 |
| CVE-2025-36753 The SWD debug interface on the Growatt ShineLan-X communication dongle is availa... |
critical | 9.8 | — | Growatt / shine lan-x firmware | 2025-12-13 | 2026-10-07 |
| CVE-2025-14621 A vulnerability was identified in code-projects Student File Management System 1... |
critical | 9.8 | — | Fabian / student file management system | 2025-12-13 | 2026-10-07 |
| CVE-2025-14622 A security flaw has been discovered in code-projects Student File Management Sys... |
critical | 9.8 | — | Fabian / student file management system | 2025-12-13 | 2026-10-07 |
| CVE-2025-14623 A weakness has been identified in code-projects Student File Management System 1... |
critical | 9.8 | — | Fabian / student file management system | 2025-12-13 | 2026-10-07 |
| CVE-2025-14637 A weakness has been identified in itsourcecode Online Pet Shop Management System... |
critical | 9.8 | — | Facebook-riares / online pet shop management system | 2025-12-13 | 2026-10-07 |
| CVE-2025-14638 A security vulnerability has been detected in itsourcecode Online Pet Shop Manag... |
critical | 9.8 | — | Facebook-riares / online pet shop management system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14639 A vulnerability was detected in itsourcecode Student Management System 1.0. |
critical | 9.8 | — | Angeljudesuarez / student management system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14640 A flaw has been found in code-projects Student File Management System 1.0. |
critical | 9.8 | — | Fabian / student file management system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14643 A vulnerability was found in code-projects Simple Attendance Record System 2.0. |
critical | 9.8 | — | Fabian / simple attendance record system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14644 A vulnerability was determined in itsourcecode Student Management System 1.0. |
critical | 9.8 | — | Angeljudesuarez / student management system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14645 A vulnerability was identified in code-projects Student File Management System 1... |
critical | 9.8 | — | Fabian / student file management system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14646 A security flaw has been discovered in code-projects Student File Management Sys... |
critical | 9.8 | — | Fabian / student file management system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14647 A weakness has been identified in code-projects Computer Book Store 1.0. |
critical | 9.8 | — | Carmelo / computer book store | 2025-12-14 | 2026-10-07 |
| CVE-2025-14649 A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. |
critical | 9.8 | — | Admerc / online cake ordering system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14650 A flaw has been found in itsourcecode Online Cake Ordering System 1.0. |
critical | 9.8 | — | Admerc / online cake ordering system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14652 A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. |
critical | 9.8 | — | Admerc / online cake ordering system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14653 A vulnerability was determined in itsourcecode Student Management System 1.0. |
critical | 9.8 | — | Angeljudesuarez / student management system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14659 A vulnerability was detected in D-Link DIR-860LB1 and DIR-868LB1 203b01/203b03. |
critical | 9.8 | — | Dlink / dir-868l b1 firmware | 2025-12-14 | 2026-10-07 |
| CVE-2025-14661 A vulnerability has been found in itsourcecode Student Managemen System 1.0. |
critical | 9.8 | — | Angeljudesuarez / student management system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14704 A vulnerability was found in Shiguangwu sgwbox N3 2.0.25. |
critical | 9.8 | — | Sgwbox / n3 firmware | 2025-12-15 | 2026-10-07 |
| CVE-2025-14710 A vulnerability was detected in FantasticLBP Hotels Server up to 67b44df162fab26... |
critical | 9.8 | — | Fantasticlbp / hotels server | 2025-12-15 | 2026-10-07 |
| CVE-2025-14711 A flaw has been found in FantasticLBP Hotels Server up to 67b44df162fab26df209bd... |
critical | 9.8 | — | Fantasticlbp / hotels server | 2025-12-15 | 2026-10-07 |
| CVE-2025-64725 Weblate is a web based localization tool. |
critical | 9.8 | — | Weblate / weblate | 2025-12-15 | 2026-10-07 |
| CVE-2025-67744 DeepChat is an open-source artificial intelligence agent platform that unifies m... |
critical | 9.6 | — | Thinkinai / deepchat | 2025-12-16 | 2026-10-07 |
| CVE-2025-59385 An authentication bypass by spoofing vulnerability has been reported to affect s... |
critical | 9.8 | — | Qnap / qts | 2025-12-16 | 2026-10-07 |
| CVE-2025-62849 An SQL injection vulnerability has been reported to affect several QNAP operatin... |
critical | 9.8 | — | Qnap / qts | 2025-12-16 | 2026-10-07 |
| CVE-2026-106227 Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote... |
critical | 9.6 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-96408 A code injection vulnerability exists in the upgrade script of Movable Type, whi... |
critical | 9.4 | — | — | 2026-10-07 | 2026-10-07 |
| CVE-2026-106511 MultiversX's multisig-improved (repository: mx-multisig-and-modules) reference i... |
critical | 9.8 | — | — | 2026-10-06 | 2026-10-07 |
| CVE-2025-25249 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability |
critical | 9.8 | Listed | Fortinet / Multiple Products | 2026-01-13 | 2026-10-07 |
| CVE-2015-6420 Serialized-object interfaces in certain Cisco Collaboration and Social Media; En... |
critical | 9.8 | — | Apache / commons collections | 2015-12-15 | 2026-10-07 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.