Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

October 2026 CVE archive

Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in October 2026Materially updated (Critical / KEV)
Total records
17,481
Critical
1,390
High
6,087
Medium
6,447
Low
659
Severity not reported
2,898
In CISA KEV
21

Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (403), apple (294), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-98339
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80...
high 8.8 —— 2026-10-062026-10-19
CVE-2026-98341
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98330
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80...
high 7.0 —— 2026-10-062026-10-19
CVE-2026-98331
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80...
high 7.0 —— 2026-10-062026-10-19
CVE-2026-98324
In the Linux kernel, the following vulnerability has been resolved: dmaengine:...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98315
In the Linux kernel, the following vulnerability has been resolved: ntfs: prote...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98318
In the Linux kernel, the following vulnerability has been resolved: smb: client...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98320
In the Linux kernel, the following vulnerability has been resolved: netfilter:...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98311
In the Linux kernel, the following vulnerability has been resolved: wifi: virt_...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98305
In the Linux kernel, the following vulnerability has been resolved: net: dsa: m...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98290
In the Linux kernel, the following vulnerability has been resolved: Bluetooth:...
high 7.5 —— 2026-10-062026-10-19
CVE-2026-98281
In the Linux kernel, the following vulnerability has been resolved: futex: Also...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98282
In the Linux kernel, the following vulnerability has been resolved: powerpc/iom...
high 8.8 —— 2026-10-062026-10-19
CVE-2026-98283
In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: B...
high 8.8 —— 2026-10-062026-10-19
CVE-2026-98276
In the Linux kernel, the following vulnerability has been resolved: net: lock t...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98260
In the Linux kernel, the following vulnerability has been resolved: exec: Clean...
high 7.8 —— 2026-10-062026-10-30
CVE-2026-98261
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix s...
high 8.1 —— 2026-10-062026-10-19
CVE-2026-98254
In the Linux kernel, the following vulnerability has been resolved: swiotlb: us...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98256
In the Linux kernel, the following vulnerability has been resolved: signal: Pre...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98257
In the Linux kernel, the following vulnerability has been resolved: rds: ib: us...
high 7.5 —— 2026-10-062026-10-19
CVE-2026-98258
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-t...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98251
In the Linux kernel, the following vulnerability has been resolved: openvswitch...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98252
In the Linux kernel, the following vulnerability has been resolved: RDMA/core:...
high 7.0 —— 2026-10-062026-10-19
CVE-2026-98253
In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma:...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98241
In the Linux kernel, the following vulnerability has been resolved: ipv6: xfrm:...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98243
In the Linux kernel, the following vulnerability has been resolved: dma-buf/dma...
high 7.1 —— 2026-10-062026-10-19
CVE-2026-98239
In the Linux kernel, the following vulnerability has been resolved: net: lan743...
high 8.1 —— 2026-10-062026-10-19
CVE-2026-98228
In the Linux kernel, the following vulnerability has been resolved: mips: selec...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98229
In the Linux kernel, the following vulnerability has been resolved: xfrm: save...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98230
In the Linux kernel, the following vulnerability has been resolved: xfrm: use h...
high 7.0 —— 2026-10-062026-10-19
CVE-2026-98216
In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fi...
high 7.1 —— 2026-10-062026-10-19
CVE-2026-98197
In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83...
high 7.0 —— 2026-10-062026-10-19
CVE-2026-98180
In the Linux kernel, the following vulnerability has been resolved: drm/msm: RC...
high 7.1 —— 2026-10-062026-10-19
CVE-2026-98173
In the Linux kernel, the following vulnerability has been resolved: smb: client...
high 7.5 —— 2026-10-062026-10-30
CVE-2026-98174
In the Linux kernel, the following vulnerability has been resolved: smb: client...
high 7.5 —— 2026-10-062026-10-19
CVE-2026-98175
In the Linux kernel, the following vulnerability has been resolved: smb: client...
high 7.5 —— 2026-10-062026-10-19
CVE-2026-98166
In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fi...
high 7.8 —— 2026-10-062026-10-26
CVE-2026-98169
In the Linux kernel, the following vulnerability has been resolved: smb: client...
high 7.1 —— 2026-10-062026-10-30
CVE-2026-98171
In the Linux kernel, the following vulnerability has been resolved: smb: client...
high 8.8 —— 2026-10-062026-10-30
CVE-2026-94675
Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack <= 6....
high 7.1 —— 2026-10-062026-10-06

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.