October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,447
Low
659
Severity not reported
2,898
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (403), apple (294), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-105816 Vault and Vault Enterprise did not consistently verify that stored plugin catalo... |
high | 8.0 | — | — | 2026-10-07 | 2026-10-09 |
| CVE-2026-76282 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.8 | — | Splunk / splunk | 2026-10-07 | 2026-10-16 |
| CVE-2026-76283 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 7.6 | — | Splunk / splunk | 2026-10-07 | 2026-10-16 |
| CVE-2026-76266 In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux... |
high | 7.7 | — | Splunk / splunk | 2026-10-07 | 2026-10-14 |
| CVE-2026-107352 Missing authorization checks in Amazon Athena engine version 3 request handling... |
high | 7.7 | — | — | 2026-10-07 | 2026-10-11 |
| CVE-2026-107227 The AsyncHttpClient (AHC) library allows Java applications to easily execute HTT... |
high | 7.5 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-107161 A heap-based buffer overflow flaw was found in Cyrus SASL. |
high | 7.5 | — | — | 2026-10-07 | 2026-10-30 |
| CVE-2026-107219 Excelize is a Go language library for reading and writing Microsoft Excel spread... |
high | 7.5 | — | Excelize / excelize | 2026-10-07 | 2026-10-13 |
| CVE-2026-107223 Excelize is a Go language library for reading and writing Microsoft Excel spread... |
high | 7.5 | — | Excelize / excelize | 2026-10-07 | 2026-10-13 |
| CVE-2026-107217 Excelize is a Go language library for reading and writing Microsoft Excel spread... |
high | 7.5 | — | Excelize / excelize | 2026-10-07 | 2026-10-13 |
| CVE-2026-103371 Insertion of Sensitive Information into Log File in Apache Geode Web Management. |
high | 7.5 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-106164 In Progress® Telerik® Document Processing SpreadProcessing library, versions pri... |
high | 7.3 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-96335 Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Inc... |
high | 7.5 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-56851 The Nickname profile can panic with an out-of-bounds slice error when transformi... |
high | 7.5 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-107214 Excelize is a Go language library for reading and writing Microsoft Excel spread... |
high | 7.5 | — | Excelize / excelize | 2026-10-07 | 2026-10-13 |
| CVE-2026-107215 Excelize is a Go language library for reading and writing Microsoft Excel spread... |
high | 7.5 | — | Excelize / excelize | 2026-10-07 | 2026-10-13 |
| CVE-2026-107216 Excelize is a Go language library for reading and writing Microsoft Excel spread... |
high | 7.5 | — | Excelize / excelize | 2026-10-07 | 2026-10-13 |
| CVE-2026-107212 Excelize is a Go language library for reading and writing Microsoft Excel spread... |
high | 7.5 | — | Excelize / excelize | 2026-10-07 | 2026-10-13 |
| CVE-2026-94662 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-94670 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-95534 Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited... |
high | 8.8 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-95595 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-76484 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.8 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-76470 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.8 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-76472 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.8 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-76467 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 7.5 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-76468 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.2 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-76469 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 7.4 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-76457 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.6 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-76458 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.6 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-76463 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.8 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-76453 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.8 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-76456 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.6 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-62251 Homer is open source telecom observability software. |
high | 8.1 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-20362 A vulnerability in the web-based management interface of Cisco Finesse could all... |
high | 7.2 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-106557 Backstage is an open framework for building developer portals. |
high | 7.7 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-107270 Gophish through 0.12.1 contains an insecure direct object reference vulnerabilit... |
high | 7.1 | — | — | 2026-10-07 | 2026-10-07 |
| CVE-2026-107205 LMCache through 0.5.5 contains a missing authentication vulnerability in the mul... |
high | 8.6 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-107207 LMCache through 0.5.5 contains a server-side request forgery vulnerability in it... |
high | 7.2 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-107209 ImageMagick is free and open-source software used for editing and manipulating d... |
high | 7.5 | — | Imagemagick / imagemagick | 2026-10-07 | 2026-10-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.