October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-63154 Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulne... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-63158 Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnera... |
high | 7.4 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-63159 Omnispace Agora Project before 26.10.0 contains a predictable password-reset tok... |
high | 7.4 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-63160 Omnispace Agora Project before 26.10.0 contains a vulnerability where the persis... |
high | 7.4 | — | — | 2026-10-13 | 2026-10-18 |
| CVE-2026-63161 Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-63162 Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability t... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-63163 Omnispace Agora Project before 26.10.0 contains a broken access control vulnerab... |
high | 7.5 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-63165 Omnispace Agora Project before 26.10.0 contains a SQL injection vulnerability in... |
high | 8.1 | — | — | 2026-10-13 | 2026-10-18 |
| CVE-2026-63149 Omnispace Agora Project before 26.10.0 contains an insecure randomness vulnerabi... |
high | 7.4 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-63152 Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vul... |
high | 8.1 | — | — | 2026-10-13 | 2026-10-17 |
| CVE-2026-63153 Omnispace Agora Project before 26.10.0 contains a broken access control vulnerab... |
high | 8.1 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-55601 MultiTail is a utility for monitoring multiple log files in one terminal. |
high | 7.3 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-16753 Incorrect authorization in the library-query execution endpoint in Lowcoder vers... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-20 |
| CVE-2026-110083 Adobe Experience Manager is affected by an Improper Neutralization of Special El... |
high | 7.1 | — | Adobe / experience manager | 2026-10-13 | 2026-10-31 |
| CVE-2026-110084 Adobe Experience Manager is affected by an XML Injection (aka Blind XPath Inject... |
high | 7.1 | — | Adobe / experience manager | 2026-10-13 | 2026-10-31 |
| CVE-2026-110005 The `periphery` agent's container-management functionality of Komodo version 2.2... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-20 |
| CVE-2026-106634 Adobe Experience Manager is affected by an Improper Limitation of a Pathname to... |
high | 7.7 | — | Adobe / experience manager | 2026-10-13 | 2026-10-30 |
| CVE-2026-103854 Dimension is affected by a Stack-based Buffer Overflow vulnerability that could... |
high | 7.8 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-103846 Dimension is affected by an Improper Neutralization of Input During Web Page Gen... |
high | 8.6 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-103847 Dimension is affected by an Untrusted Search Path vulnerability that could resul... |
high | 8.6 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-103851 Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability... |
high | 7.8 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-103837 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103838 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103839 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103840 Substance3D - Stager is affected by an out-of-bounds read vulnerability when par... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-20 |
| CVE-2026-103841 Substance3D - Stager is affected by an out-of-bounds read vulnerability when par... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-20 |
| CVE-2026-103842 Substance3D - Stager is affected by an out-of-bounds read vulnerability when par... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-20 |
| CVE-2026-103843 Substance3D - Stager is affected by a Use After Free vulnerability that could re... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-20 |
| CVE-2026-103844 Dimension is affected by an out-of-bounds write vulnerability that could result... |
high | 7.8 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-103845 Dimension is affected by an Uncontrolled Search Path Element vulnerability that... |
high | 8.6 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-103830 Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103832 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103833 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103834 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103835 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-103836 Substance3D - Stager is affected by an out-of-bounds write vulnerability that co... |
high | 7.8 | — | Adobe / substance 3d stager | 2026-10-13 | 2026-10-19 |
| CVE-2026-102855 Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized atta... |
high | 8.8 | — | Microsoft / 365 apps | 2026-10-13 | 2026-10-20 |
| CVE-2026-102234 Reliance on untrusted inputs in a security decision in Visual Studio Code allows... |
high | 7.4 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-102235 Improper encoding or escaping of output in Visual Studio Code allows an unauthor... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-97830 Double free in Windows Internet Information Services allows an unauthorized atta... |
high | 7.5 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-14 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.