October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (382), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-109722 JIT miscompilation in the JavaScript Engine: JIT component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-109709 Information disclosure, privilege escalation in the Security: Process Sandboxing... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-109712 Sandbox escape due to uninitialized memory in the Graphics component. |
high | 7.1 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-109715 Incorrect boundary conditions in the JavaScript Engine component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-109704 Privilege escalation in the Application Update component. |
high | 8.8 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-109405 A security flaw has been discovered in conductor-oss conductor up to 3.33.0-rc10... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-109403 A vulnerability was determined in conductor-oss conductor up to 3.32.5. |
high | 7.3 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-109832 A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. |
high | 7.5 | — | — | 2026-10-13 | 2026-11-04 |
| CVE-2026-89197 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). |
high | 8.8 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-89198 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). |
high | 8.8 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-89199 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). |
high | 8.8 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-89201 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). |
high | 7.5 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-72895 A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01... |
high | 7.7 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-78556 A vulnerability has been identified in Industrial Edge App Publisher (All versio... |
high | 7.4 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-78557 A vulnerability has been identified in Industrial Edge App Publisher (All versio... |
high | 8.3 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-85114 A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webser... |
high | 7.5 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-89196 A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). |
high | 8.8 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-59241 A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATI... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-102073 A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions),... |
high | 8.2 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-102074 A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions),... |
high | 7.5 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-102075 A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions),... |
high | 7.5 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-102076 A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions),... |
high | 7.5 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-13138 Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Softwa... |
high | 8.6 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-109687 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti... |
high | 7.6 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-109114 A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-109115 A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-109116 A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-108179 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti... |
high | 7.6 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-101020 An incorrect permission assignment for critical resource issue exists in AssetVi... |
high | 7.8 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-102562 The AcyMailing plugin for WordPress is vulnerable to Stored Cross-Site Scripting... |
high | 7.2 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-103418 Firefox for iOS directly interpolated the page’s HTML language attribute into tr... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-102007 The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email... |
high | 7.2 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-108973 A vulnerability was determined in SourceCodester Contact Tracing System 1.0. |
high | 7.3 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-108974 A vulnerability was identified in SourceCodester E-Learning System 1.0. |
high | 7.3 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-108975 A security flaw has been discovered in SourceCodester Library Management System... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-103316 The macOS version of the DigiD app is not signed with Hardened Runtime. |
high | 7.1 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-108972 A vulnerability was found in SourceCodester Human Resource Management System 1.0... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-108970 A vulnerability was detected in itsmeravitejak Online-Examination-System up to e... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-108969 A security vulnerability has been detected in itsmeravitejak Online-Examination-... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-108968 A weakness has been identified in SourceCodester Performance Indicator System 1.... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-15 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.