October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,928
Critical
3,121
High
7,064
Medium
6,896
Low
608
Severity not reported
4,239
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-81755 Uncontrolled resource consumption in the streaming RPC component of Apache bRPC... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-82210 Enforceable assertion in the streaming feature of Apache bRPC (version < 1.18.0)... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-82231 A Thrift client in Apache bRPC (version < 1.18.0, built with WITH_THRIFT which i... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-82425 A reachable assertion in Apache bRPC (version < 1.18.0) on all platforms allows... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-82942 A data race in the RDMA transport of Apache bRPC (versions < 1.18.0) allows a re... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-61916 Out-of-bounds reads in URL parsing and case-insensitive header lookup in Apache... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-119656 CoreShop by CoreUnion through 1.5.5 contains an unauthenticated sql injection vu... |
high | 7.5 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-114144 toml-node is a TOML parser for Node.js and the browser. |
high | 7.5 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-115776 Twisted is an event-based framework for internet applications, supporting Python... |
high | 7.5 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-115907 zip is a zip library for Rust that supports reading and writing simple ZIP files... |
high | 7.5 | — | — | 2026-10-26 | 2026-10-30 |
| CVE-2026-114716 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail hea... |
high | 8.5 | — | Roundcube / webmail | 2026-10-22 | 2026-10-30 |
| CVE-2026-101775 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
high | 7.4 | — | Oracle / mysql cluster | 2026-10-20 | 2026-10-30 |
| CVE-2026-115713 Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elast... |
high | 7.5 | — | Elastic / elastic cloud enterprise | 2026-10-29 | 2026-10-30 |
| CVE-2026-114720 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP co... |
high | 7.1 | — | Roundcube / webmail | 2026-10-22 | 2026-10-30 |
| CVE-2026-63875 In the Linux kernel, the following vulnerability has been resolved:
arm64: tlb:... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63874 In the Linux kernel, the following vulnerability has been resolved:
net: mctp:... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2024-40637 dbt enables data analysts and engineers to transform their data using the same p... |
high | 7.3 | — | Getdbt / dbt-core | 2024-07-16 | 2026-10-30 |
| CVE-2026-63898 In the Linux kernel, the following vulnerability has been resolved:
USB: serial... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63899 In the Linux kernel, the following vulnerability has been resolved:
USB: serial... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63901 In the Linux kernel, the following vulnerability has been resolved:
USB: serial... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63902 In the Linux kernel, the following vulnerability has been resolved:
USB: serial... |
high | 7.1 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63903 In the Linux kernel, the following vulnerability has been resolved:
USB: serial... |
high | 7.1 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63904 In the Linux kernel, the following vulnerability has been resolved:
usb: usbtmc... |
high | 7.1 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63905 In the Linux kernel, the following vulnerability has been resolved:
usbip: vudc... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63906 In the Linux kernel, the following vulnerability has been resolved:
usb: musb:... |
high | 8.4 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63955 In the Linux kernel, the following vulnerability has been resolved:
mm/vmalloc:... |
high | 7.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63954 In the Linux kernel, the following vulnerability has been resolved:
hpfs: fix a... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63951 In the Linux kernel, the following vulnerability has been resolved:
zram: fix u... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63957 In the Linux kernel, the following vulnerability has been resolved:
USB: serial... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63956 In the Linux kernel, the following vulnerability has been resolved:
USB: serial... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63907 In the Linux kernel, the following vulnerability has been resolved:
uio: uio_pc... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63909 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: OOB... |
high | 8.1 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63910 In the Linux kernel, the following vulnerability has been resolved:
dma-buf: fi... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63911 In the Linux kernel, the following vulnerability has been resolved:
xfrm: iptfs... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63918 In the Linux kernel, the following vulnerability has been resolved:
l2tp: use r... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63928 In the Linux kernel, the following vulnerability has been resolved:
USB: serial... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63930 In the Linux kernel, the following vulnerability has been resolved:
iio: buffer... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63934 In the Linux kernel, the following vulnerability has been resolved:
iio: gyro:... |
high | 7.1 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63943 In the Linux kernel, the following vulnerability has been resolved:
Input: xpad... |
high | 7.1 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63949 In the Linux kernel, the following vulnerability has been resolved:
auxdisplay:... |
high | 7.1 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.