October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,928
Critical
3,121
High
7,064
Medium
6,896
Low
608
Severity not reported
4,239
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-103314 A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). |
high | 7.4 | — | — | 2026-10-19 | 2026-10-31 |
| CVE-2026-77176 A flaw was found in Kata Containers. |
high | 8.1 | — | — | 2026-08-20 | 2026-10-31 |
| CVE-2025-2241 A flaw was found in Hive, a component of Multicluster Engine (MCE) and Advanced... |
high | 8.2 | — | — | 2025-03-17 | 2026-10-31 |
| CVE-2026-87356 Vulnerability in the Applications Platform Engineering product of Oracle E-Busin... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-31 |
| CVE-2026-91917 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input... |
high | 8.0 | — | — | 2026-10-30 | 2026-10-31 |
| CVE-2026-91913 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutra... |
high | 8.8 | — | — | 2026-10-30 | 2026-10-31 |
| CVE-2026-84243 The gettext family of functions in the GNU C Library version 2.0 and later accep... |
high | 7.0 | — | — | 2026-10-30 | 2026-10-31 |
| CVE-2026-119260 Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-10-31 |
| CVE-2026-118696 In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026... |
high | 8.0 | — | — | 2026-10-30 | 2026-10-31 |
| CVE-2026-111357 Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked brok... |
high | 7.0 | Listed | Ivanti / connect secure | 2026-10-15 | 2026-10-31 |
| CVE-2026-111504 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutra... |
high | 7.2 | — | — | 2026-10-30 | 2026-10-31 |
| CVE-2026-111505 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutra... |
high | 8.8 | — | — | 2026-10-30 | 2026-10-31 |
| CVE-2026-101682 Vulnerability in the Applications DBA product of Oracle E-Business Suite (compon... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-31 |
| CVE-2026-101213 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privil... |
high | 7.8 | — | — | 2026-10-30 | 2026-10-31 |
| CVE-2026-101214 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutra... |
high | 7.2 | — | — | 2026-10-30 | 2026-10-31 |
| CVE-2026-101210 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutra... |
high | 7.2 | — | — | 2026-10-30 | 2026-10-31 |
| CVE-2026-116896 REDAXO before 5.21.5 contains a missing authorization vulnerability in the backu... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-31 |
| CVE-2026-116748 Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in hand... |
high | 8.8 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-116811 OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime... |
high | 8.8 | — | — | 2026-10-27 | 2026-10-31 |
| CVE-2026-116816 llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability... |
high | 7.8 | — | — | 2026-10-27 | 2026-10-31 |
| CVE-2026-116623 A vulnerability was detected in code-projects Simple Content Management System 1... |
high | 7.3 | — | — | 2026-10-27 | 2026-10-31 |
| CVE-2026-116581 Seroval facilitates JavaScript value stringification, including complex structur... |
high | 7.5 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-116724 FLTK through 1.4.5 contains an integer overflow vulnerability in Fl_BMP_Image::l... |
high | 7.8 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-116257 A vulnerability was determined in BillaBear up to 2025.01.03. |
high | 7.3 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-116260 A weakness has been identified in libimobiledevice up to 1.4.0. |
high | 7.3 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-116219 Dolibarr ERP CRM before 24.0.0 contains an OS command injection vulnerability in... |
high | 7.2 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-112343 Syncplify Server! |
high | 8.1 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-115924 Rembg is a tool to remove images background. |
high | 8.6 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-116230 A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24... |
high | 7.8 | — | Ndemiccreations / plague inc evolved | 2026-10-26 | 2026-10-31 |
| CVE-2026-116236 A vulnerability has been found in Oray Pugongying X5 Pro 7.6.1. |
high | 7.2 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-96192 Use after free in Microsoft Edge for iOS allows an unauthorized attacker to exec... |
high | 8.8 | — | Microsoft / edge | 2026-10-29 | 2026-10-31 |
| CVE-2026-110083 Adobe Experience Manager is affected by an Improper Neutralization of Special El... |
high | 7.1 | — | Adobe / experience manager | 2026-10-13 | 2026-10-31 |
| CVE-2026-110084 Adobe Experience Manager is affected by an XML Injection (aka Blind XPath Inject... |
high | 7.1 | — | Adobe / experience manager | 2026-10-13 | 2026-10-31 |
| CVE-2026-78527 Contributor PHP Object Injection in GS Testimonial Slider <= 3.3.10 versions. |
high | 8.8 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-48201 Unauthenticated Cross Site Scripting (XSS) in Fast Velocity Minify <= 3.5.7 vers... |
high | 7.1 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-14476 A path traversal flaw was found in SSSD's AD GPO provider. |
high | 8.0 | — | — | 2026-07-07 | 2026-10-30 |
| CVE-2026-116401 Unauthenticated Broken Access Control in HUSKY <= 1.4.6 versions. |
high | 7.5 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-118086 Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions. |
high | 8.8 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-85893 Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacke... |
high | 8.8 | — | Microsoft / edge chromium | 2026-09-15 | 2026-10-30 |
| CVE-2026-81396 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized att... |
high | 7.8 | — | Microsoft / 365 apps | 2026-09-08 | 2026-10-30 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.