October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,401
High
6,156
Medium
6,455
Low
659
Severity not reported
2,810
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (403), apple (305), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-117028 Skuul School Management System through version 2.6.5 is vulnerable to incorrect... |
medium | 6.5 | — | — | 2026-10-30 | 2026-11-03 |
| CVE-2026-112348 Kirki plugin for WordPress before 6.2.5 contains a reCAPTCHA bypass vulnerabilit... |
medium | 6.5 | — | — | 2026-10-30 | 2026-11-04 |
| CVE-2026-111498 OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Lo... |
medium | 4.7 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-111499 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permi... |
medium | 5.5 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-111500 Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authenti... |
medium | 5.4 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-64860 Rejected reason: Further research determined the issue is not a vulnerability. |
medium | 6.5 | — | — | 2026-10-30 | 2026-11-05 |
| CVE-2026-112374 FOSSBilling before 0.8.9 contains a Cross-Site Request Forgery vulnerability in... |
medium | 4.3 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-111501 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restri... |
medium | 5.4 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-111502 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Insufficiently... |
medium | 4.3 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119565 Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in up... |
medium | 4.3 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119566 Prometheus through 3.15.1 contains a credential leak vulnerability that allows a... |
medium | 4.8 | — | — | 2026-10-30 | 2026-11-04 |
| CVE-2026-119591 SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOpt... |
medium | 5.5 | — | Sqlite / sqlite | 2026-10-30 | 2026-11-04 |
| CVE-2026-119559 OpenLiteSpeed through 1.9.4 contains an authentication bypass vulnerability that... |
medium | 5.9 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119560 OPNsense core through 26.7.8 contains a configuration injection vulnerability th... |
medium | 5.9 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119563 phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability th... |
medium | 5.4 | — | Phpmyadmin / phpmyadmin | 2026-10-30 | 2026-11-03 |
| CVE-2026-119564 Plausible Analytics Community Edition through 3.2.1 contains an information expo... |
medium | 5.3 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119552 Uptime Kuma through 2.5.8 contains a race condition in the Socket.IO first-run s... |
medium | 4.8 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119553 Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, an... |
medium | 6.5 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119554 Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, an... |
medium | 5.9 | — | — | 2026-10-30 | 2026-11-04 |
| CVE-2026-119555 Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 th... |
medium | 4.3 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119556 Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 th... |
medium | 4.3 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119557 n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Da... |
medium | 5.9 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119551 Jellyfin through 12.4 contains an authorization bypass vulnerability in Suggesti... |
medium | 6.5 | — | — | 2026-10-30 | 2026-11-04 |
| CVE-2026-119428 phpMyAdmin through 5.2.3 contains a server-side request forgery vulnerability th... |
medium | 5.8 | — | Phpmyadmin / phpmyadmin | 2026-10-30 | 2026-11-03 |
| CVE-2026-119429 phpMyAdmin through 5.2.3 contains a missing re-authentication vulnerability that... |
medium | 4.3 | — | Phpmyadmin / phpmyadmin | 2026-10-30 | 2026-11-03 |
| CVE-2026-119545 Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contai... |
medium | 5.3 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119546 Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contai... |
medium | 5.5 | — | — | 2026-10-30 | 2026-11-04 |
| CVE-2026-119547 Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contai... |
medium | 4.3 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119422 Juspay Hyperswitch before 1.128.0 contains an authentication bypass vulnerabilit... |
medium | 5.9 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119423 OPNsense core before 26.7.8 contains a log injection vulnerability that allows u... |
medium | 5.3 | — | — | 2026-10-30 | 2026-11-04 |
| CVE-2026-119424 OPNsense core before 26.7.8 contains a configuration line injection vulnerabilit... |
medium | 6.8 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119425 OPNsense core 26.1.6 through 26.7.7 contains an authentication bypass vulnerabil... |
medium | 5.4 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119416 CakePHP through 5.4.3 contains an improper cookie domain validation vulnerabilit... |
medium | 4.8 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119421 Juspay Hyperswitch through 1.128.0 (and builds before 2026.10.19.0) contains a m... |
medium | 5.9 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119414 Bitwarden Server before 2026.10.1 on Entity Framework backends contains an autho... |
medium | 4.3 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119375 SQLite before 3.54.0 contains an information disclosure vulnerability that allow... |
medium | 5.5 | — | Sqlite / sqlite | 2026-10-30 | 2026-11-03 |
| CVE-2026-119376 SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attac... |
medium | 5.5 | — | Sqlite / sqlite | 2026-10-30 | 2026-11-04 |
| CVE-2026-119378 SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree exten... |
medium | 5.5 | — | Sqlite / sqlite | 2026-10-30 | 2026-11-03 |
| CVE-2026-119146 ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in... |
medium | 5.6 | — | — | 2026-10-30 | 2026-11-04 |
| CVE-2026-119147 ProFTPD before 1.3.9e and 1.3.10rc5 contains an authorization bypass in the mod_... |
medium | 4.3 | — | — | 2026-10-30 | 2026-10-30 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.