October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,950
Critical
3,122
High
7,067
Medium
6,906
Low
609
Severity not reported
4,246
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-48383 Adobe Experience Manager is affected by an Incorrect Authorization vulnerability... |
critical | 10.0 | — | Adobe / experience manager | 2026-10-13 | 2026-10-31 |
| CVE-2026-75732 Adobe Experience Manager is affected by an Incorrect Authorization vulnerability... |
critical | 9.9 | — | Adobe / experience manager | 2026-10-13 | 2026-10-31 |
| CVE-2026-83662 Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) v... |
critical | 9.3 | — | Adobe / experience manager | 2026-10-13 | 2026-10-31 |
| CVE-2026-48382 Adobe Experience Manager is affected by an Incorrect Authorization vulnerability... |
critical | 10.0 | — | Adobe / experience manager | 2026-10-13 | 2026-10-30 |
| CVE-2026-90532 Adobe Experience Manager is affected by an Incorrect Authorization vulnerability... |
critical | 10.0 | — | Adobe / experience manager | 2026-10-13 | 2026-10-29 |
| CVE-2026-90531 Adobe Experience Manager is affected by an Improper Restriction of XML External... |
critical | 9.6 | — | Adobe / experience manager | 2026-10-13 | 2026-10-29 |
| CVE-2026-48356 Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type... |
critical | 9.3 | Listed | Adobe / commerce | 2026-07-14 | 2026-10-28 |
| CVE-2026-27246 Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cro... |
critical | 9.3 | — | Adobe / connect | 2026-04-14 | 2026-10-26 |
| CVE-2026-27243 Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cro... |
critical | 9.3 | — | Adobe / connect | 2026-04-14 | 2026-10-26 |
| CVE-2026-27245 Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cro... |
critical | 9.3 | — | Adobe / connect | 2026-04-14 | 2026-10-26 |
| CVE-2026-27303 Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserializati... |
critical | 9.6 | — | Adobe / connect | 2026-04-14 | 2026-10-26 |
| CVE-2026-105895 Adobe Experience Manager is affected by an Improper Input Validation vulnerabili... |
critical | 9.9 | — | Adobe / experience manager | 2026-10-13 | 2026-10-26 |
| CVE-2026-106626 Adobe Experience Manager is affected by an Improper Input Validation vulnerabili... |
critical | 9.1 | — | Adobe / experience manager | 2026-10-13 | 2026-10-26 |
| CVE-2026-106629 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
critical | 9.3 | — | Adobe / experience manager | 2026-10-13 | 2026-10-26 |
| CVE-2026-106630 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
critical | 9.3 | — | Adobe / experience manager | 2026-10-13 | 2026-10-26 |
| CVE-2026-48449 Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerabi... |
critical | 9.8 | — | Adobe / campaign | 2026-07-30 | 2026-10-23 |
| CVE-2026-75994 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
critical | 9.6 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-20 |
| CVE-2026-105899 ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vul... |
critical | 10.0 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-20 |
| CVE-2025-54261 ColdFusion versions 2025.3, 2023.15, 2021.21 and earlier are affected by an Impr... |
critical | 10.0 | — | Adobe / coldfusion | 2025-09-09 | 2026-10-18 |
| CVE-2026-105903 ColdFusion is affected by an Improper Control of Generation of Code ('Code Injec... |
critical | 9.9 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-106612 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
critical | 9.9 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-106620 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
critical | 9.6 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-15 |
| CVE-2026-106622 ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability tha... |
critical | 10.0 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-15 |
| CVE-2026-106621 ColdFusion is affected by an Improper Control of Generation of Code ('Code Injec... |
critical | 9.1 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-15 |
| CVE-2026-106619 ColdFusion is affected by an Improper Input Validation vulnerability that could... |
critical | 9.0 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-15 |
| CVE-2026-106624 ColdFusion is affected by an Improper Control of Generation of Code ('Code Injec... |
critical | 10.0 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-15 |
| CVE-2026-110083 Adobe Experience Manager is affected by an Improper Neutralization of Special El... |
high | 7.1 | — | Adobe / experience manager | 2026-10-13 | 2026-10-31 |
| CVE-2026-110084 Adobe Experience Manager is affected by an XML Injection (aka Blind XPath Inject... |
high | 7.1 | — | Adobe / experience manager | 2026-10-13 | 2026-10-31 |
| CVE-2026-106634 Adobe Experience Manager is affected by an Improper Limitation of a Pathname to... |
high | 7.7 | — | Adobe / experience manager | 2026-10-13 | 2026-10-30 |
| CVE-2023-22234 Adobe Premiere Rush version 2.6 (and earlier) is affected by a Stack-based Buffe... |
high | 7.8 | — | Adobe / premiere rush | 2023-02-17 | 2026-10-28 |
| CVE-2026-96521 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-28 |
| CVE-2026-83661 Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-22 |
| CVE-2026-95635 Photoshop Desktop is affected by a Double Free vulnerability that could result i... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-22 |
| CVE-2026-95636 Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-22 |
| CVE-2026-95637 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-22 |
| CVE-2026-95638 Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-22 |
| CVE-2026-95639 Photoshop Desktop is affected by an Incorrect Authorization vulnerability that c... |
high | 8.6 | — | Adobe / photoshop | 2026-10-13 | 2026-10-22 |
| CVE-2026-95641 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-22 |
| CVE-2026-75996 ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability tha... |
high | 7.5 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-20 |
| CVE-2026-34633 ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability tha... |
high | 7.7 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-20 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.