October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,928
Critical
3,121
High
7,064
Medium
6,896
Low
608
Severity not reported
4,239
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2024-9287 A vulnerability has been found in the CPython `venv` module and CLI where path n... |
high | 7.8 | — | Python / python | 2024-10-22 | 2026-10-30 |
| CVE-2026-76418 A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Ad... |
high | 8.6 | Listed | Cisco / adaptive security appliance software | 2026-10-28 | 2026-10-30 |
| CVE-2026-101295 Path traversal / arbitrary file write in oc-mirror's operator catalog image extr... |
high | 7.3 | — | — | 2026-09-30 | 2026-10-30 |
| CVE-2026-5260 A flaw was found in libgnutls. |
high | 8.2 | — | — | 2026-05-26 | 2026-10-30 |
| CVE-2026-58014 A flaw was found in GLib. |
high | 8.6 | — | Gnome / glib | 2026-06-30 | 2026-10-30 |
| CVE-2026-58015 A flaw was found in GLib. |
high | 7.5 | — | Gnome / glib | 2026-06-30 | 2026-10-30 |
| CVE-2026-42013 A flaw was found in gnutls. |
high | 8.2 | — | — | 2026-05-26 | 2026-10-30 |
| CVE-2026-42011 A flaw was found in gnutls. |
high | 7.4 | — | — | 2026-05-07 | 2026-10-30 |
| CVE-2026-93017 The `insights-operator-gather` ClusterRole grants the operator's service account... |
high | 7.7 | — | — | 2026-10-08 | 2026-10-30 |
| CVE-2026-49329 A flaw was found in openshift/oauth-server. |
high | 7.5 | — | — | 2026-09-01 | 2026-10-30 |
| CVE-2026-75888 A flaw was found in the OpenShift console. |
high | 7.7 | — | — | 2026-10-12 | 2026-10-30 |
| CVE-2026-104795 The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`)... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-30 |
| CVE-2026-93851 Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10 fail t... |
high | 8.0 | — | — | 2026-10-28 | 2026-10-30 |
| CVE-2026-92982 A flaw was found in Ansible Operator Plugins. |
high | 8.5 | — | — | 2026-10-15 | 2026-10-30 |
| CVE-2026-86395 Dell PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0... |
high | 7.2 | — | — | 2026-10-28 | 2026-10-30 |
| CVE-2026-86389 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS... |
high | 7.2 | — | — | 2026-10-28 | 2026-10-30 |
| CVE-2026-86393 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS... |
high | 7.2 | — | — | 2026-10-28 | 2026-10-30 |
| CVE-2026-20586 In vdec, there is a possible out of bounds write due to a missing bounds check. |
high | 8.8 | — | Mediatek / mt8910 firmware | 2026-10-05 | 2026-10-30 |
| CVE-2026-86320 A flaw was found in flatpak-builder where Git hooks are not disabled when applyi... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-15801 A vulnerability was found in CRI-O related to the container checkpoint and resto... |
high | 8.0 | — | — | 2026-09-21 | 2026-10-30 |
| CVE-2026-58013 A flaw was found in GLib. |
high | 8.2 | — | Gnome / glib | 2026-06-30 | 2026-10-29 |
| CVE-2026-58011 A flaw was found in GLib. |
high | 7.5 | — | Gnome / glib | 2026-06-30 | 2026-10-29 |
| CVE-2026-58012 A flaw was found in GLib. |
high | 8.2 | — | Gnome / glib | 2026-06-30 | 2026-10-29 |
| CVE-2026-58010 A flaw was found in GLib. |
high | 8.2 | — | Gnome / glib | 2026-06-30 | 2026-10-29 |
| CVE-2026-16118 A flaw was found in xdgmime. |
high | 7.1 | — | — | 2026-07-17 | 2026-10-29 |
| CVE-2026-93589 ImageMagick before 7.1.2-31 and 6.9.13-56 contains a division-by-zero flaw in th... |
high | 7.5 | — | Imagemagick / imagemagick | 2026-09-18 | 2026-10-29 |
| CVE-2026-86421 ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL imag... |
high | 7.5 | — | Imagemagick / imagemagick | 2026-09-07 | 2026-10-29 |
| CVE-2026-90932 LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerabilit... |
high | 7.2 | — | — | 2026-09-14 | 2026-10-29 |
| CVE-2026-85168 n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution... |
high | 8.8 | — | N8n / n8n | 2026-09-03 | 2026-10-29 |
| CVE-2026-85169 n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox e... |
high | 8.8 | — | N8n / n8n | 2026-09-03 | 2026-10-29 |
| CVE-2026-86420 ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory bud... |
high | 7.5 | — | Imagemagick / imagemagick | 2026-09-07 | 2026-10-29 |
| CVE-2026-75857 CodeWhale versions >= 0.3.10 and < 0.8.64 (published as deepseek-tui >= 0.3.10 a... |
high | 7.0 | — | — | 2026-08-18 | 2026-10-29 |
| CVE-2026-73608 SiYuan's development branch (endpoint introduced by commit 9b8e8956f, not presen... |
high | 8.6 | — | — | 2026-08-13 | 2026-10-29 |
| CVE-2026-72825 The getgrav/grav-plugin-api plugin before 1.0.13 contains an API-key scope cap b... |
high | 7.6 | — | — | 2026-08-14 | 2026-10-29 |
| CVE-2026-72826 The getgrav/grav-plugin-api plugin before 1.0.13 fails to validate that the scop... |
high | 8.8 | — | — | 2026-08-14 | 2026-10-29 |
| CVE-2026-72831 The Flex Objects plugin (through 1.4.6, tested with Grav 2.0.11) contains an inc... |
high | 8.8 | — | — | 2026-08-14 | 2026-10-29 |
| CVE-2026-70640 llama.cpp builds b1886 through b7445 contain a race condition use-after-free vul... |
high | 7.0 | — | Ggml / llama.cpp | 2026-08-06 | 2026-10-29 |
| CVE-2026-72772 n8n before 2.32.1 (and before 2.31.5) is vulnerable to account takeover via the... |
high | 8.8 | — | N8n / n8n | 2026-08-11 | 2026-10-29 |
| CVE-2026-72773 n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in... |
high | 7.7 | — | N8n / n8n | 2026-08-11 | 2026-10-29 |
| CVE-2026-72775 n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability i... |
high | 8.8 | — | N8n / n8n | 2026-08-11 | 2026-10-29 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.