October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-35499 An os command injection vulnerability exists in the boa formWsc peerRptPin funct... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-40615 A stack-based buffer overflow vulnerability exists in the boa formParentControl... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-40627 An os command injection vulnerability exists in the boa formWsc targetAPSsid fun... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-41222 A stack-based buffer overflow vulnerability exists in the boa formParentControl... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-41223 A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice m... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-42019 Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Se... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-112712 @fastify/middie is the Express-style middleware engine for Fastify. |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2026-10133 A stack-based buffer overflow vulnerability exists in the batchupg functionality... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-10135 A OS command injection vulnerability exists in the batchupg functionality of X20... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-10136 A heap-based buffer overflow vulnerability exists in the boa formUpload() functi... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-10137 A stack-based buffer overflow vulnerability exists in the boa formUpload() funct... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-10138 A OS command injection vulnerability exists in the boa formUpload() functionalit... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-10139 A stack-based buffer overflow vulnerability exists in the Mcli functionality of... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-10141 A Unsigned Firmware vulnerability exists in the boa Firmware Update functionalit... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-10131 An OS command injection vulnerability exists in the boa formPasswordSetup functi... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-10132 A stack-based buffer overflow vulnerability exists in the boa formIpQos mac func... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-86411 An `ftp://` transfer configured with `CURLUSESSL_NONE` can reuse a pooled FTP
co... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-86413 When using an *ambient user* in a first transfer doing Negotiate
authentication... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2026-113867 Thunderbird did not escape attribute values when serializing outgoing XMPP stanz... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-112380 Missing authorization in the WhatsApp group channel in Kiro Crew might allow a r... |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-97406 XERJ Console API bearer tokens can bypass the passkey‑only authentication requir... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-113708 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-113709 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-113802 Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command inj... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-113672 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-113506 A vulnerability has been found in aaPanel up to 8.25.0. |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-113703 SuggestArr before 3.0.0 contains an authentication bypass vulnerability in its l... |
critical | 9.3 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-113678 Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::... |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-23 |
| CVE-2026-103119 Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-101356 Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting H... |
critical | 9.1 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-113620 In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upg... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-113390 A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-113391 A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-113399 Incorrect boundary conditions in the SVG component. |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-113389 A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. |
critical | 9.9 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-105312 A Kubernetes tenant with create permission on Console custom resources can set s... |
critical | 9.9 | — | — | 2026-10-20 | 2026-11-03 |
| CVE-2026-86868 An authentication issue was addressed with improved state management. |
critical | 9.1 | — | Apple / macos | 2026-10-20 | 2026-11-03 |
| CVE-2026-77936 Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECU... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-75128 Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-77930 EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that a... |
critical | 9.8 | — | — | 2026-10-20 | 2026-10-22 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.