October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,401
High
6,159
Medium
6,459
Low
659
Severity not reported
2,803
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (403), apple (325), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-117534 REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the... |
medium | 5.4 | — | — | 2026-10-27 | 2026-11-04 |
| CVE-2026-116893 REDAXO core before 5.21.5 contains a missing authorization vulnerability in the... |
medium | 6.8 | — | — | 2026-10-27 | 2026-11-02 |
| CVE-2026-116894 REDAXO before 5.21.5 contains an insufficient session expiration vulnerability t... |
medium | 4.2 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-116895 REDAXO before 5.21.5 contains a cross-site request forgery vulnerability because... |
medium | 5.4 | — | — | 2026-10-27 | 2026-11-04 |
| CVE-2026-116897 REDAXO core before 5.21.4 contains a missing authorization vulnerability in the... |
medium | 6.5 | — | — | 2026-10-27 | 2026-11-02 |
| CVE-2026-116899 REDAXO before 5.21.4 contains a broken access control vulnerability that allows... |
medium | 6.5 | — | — | 2026-10-27 | 2026-11-04 |
| CVE-2026-116887 Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-site scriptin... |
medium | 5.4 | — | Semantic-mediawiki / semantic mediawiki | 2026-10-27 | 2026-11-04 |
| CVE-2026-116888 SemanticMediaWiki from 3.2.0 before 7.3.1 contains a stored cross-site scripting... |
medium | 5.4 | — | Semantic-mediawiki / semantic mediawiki | 2026-10-27 | 2026-10-31 |
| CVE-2026-116889 SemanticMediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting... |
medium | 6.1 | — | Semantic-mediawiki / semantic mediawiki | 2026-10-27 | 2026-11-02 |
| CVE-2026-116891 SemanticMediaWiki from 4.2.0 before 7.2.1 contains a reflected cross-site script... |
medium | 6.1 | — | Semantic-mediawiki / semantic mediawiki | 2026-10-27 | 2026-11-04 |
| CVE-2026-116892 SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site script... |
medium | 6.1 | — | Semantic-mediawiki / semantic mediawiki | 2026-10-27 | 2026-10-31 |
| CVE-2026-116881 Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site scripting vulne... |
medium | 6.1 | — | Semantic-mediawiki / semantic mediawiki | 2026-10-27 | 2026-11-04 |
| CVE-2026-116882 Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored cross-site scriptin... |
medium | 4.8 | — | Semantic-mediawiki / semantic mediawiki | 2026-10-27 | 2026-11-04 |
| CVE-2026-116883 Semantic MediaWiki from 3.1.0 before 7.3.1 contains a stored cross-site scriptin... |
medium | 4.8 | — | Semantic-mediawiki / semantic mediawiki | 2026-10-27 | 2026-11-04 |
| CVE-2026-116884 SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored cross-site scripting... |
medium | 6.1 | — | Semantic-mediawiki / semantic mediawiki | 2026-10-27 | 2026-10-31 |
| CVE-2026-116885 Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scrip... |
medium | 6.1 | — | Semantic-mediawiki / semantic mediawiki | 2026-10-27 | 2026-11-04 |
| CVE-2026-116886 Semantic MediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scriptin... |
medium | 5.4 | — | Semantic-mediawiki / semantic mediawiki | 2026-10-27 | 2026-11-03 |
| CVE-2026-116874 SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site script... |
medium | 6.1 | — | Semantic-mediawiki / semantic mediawiki | 2026-10-27 | 2026-10-28 |
| CVE-2026-116875 SemanticMediaWiki from 3.0.0 before 7.3.1 contains a reflected cross-site script... |
medium | 6.1 | — | Semantic-mediawiki / semantic mediawiki | 2026-10-27 | 2026-11-04 |
| CVE-2026-116877 Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource con... |
medium | 6.5 | — | Semantic-mediawiki / semantic mediawiki | 2026-10-27 | 2026-11-04 |
| CVE-2026-116879 Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vuln... |
medium | 5.4 | — | Semantic-mediawiki / semantic mediawiki | 2026-10-27 | 2026-11-04 |
| CVE-2026-65213 This issue may allow an IPMI authenticated administrator to execute commands as... |
medium | 6.6 | — | — | 2026-10-27 | 2026-11-04 |
| CVE-2026-65210 This issue may allow an authenticated IPMI Administrator to read arbitrary files... |
medium | 4.9 | — | — | 2026-10-27 | 2026-11-04 |
| CVE-2026-10511 The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scrip... |
medium | 6.4 | — | — | 2026-10-27 | 2026-10-29 |
| CVE-2026-103359 The PayDunya WooCommerce Payment Gateway WordPress plugin through 1.1.6 does not... |
medium | 5.3 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-117471 Psono Server CE && EE versions 0.1.0 through 7.2.3 accepted a user-controlled ho... |
medium | 5.4 | — | — | 2026-10-27 | 2026-11-04 |
| CVE-2026-117472 Psono Server CE && EE versions 4.0.33 through 7.2.3 compared the request path fo... |
medium | 4.3 | — | — | 2026-10-27 | 2026-11-04 |
| CVE-2026-117468 Psono Server versions 5.3.5 through 7.2.3 used a permission class that did not e... |
medium | 6.5 | — | — | 2026-10-27 | 2026-11-04 |
| CVE-2026-117469 Psono Server (CE & EE) versions 1.0.0 through 7.2.3 did not enforce the directio... |
medium | 5.4 | — | — | 2026-10-27 | 2026-11-04 |
| CVE-2026-117470 Psono Server CE & EE versions 3.1.0 through 7.2.3 did not consume a stored WebAu... |
medium | 6.5 | — | — | 2026-10-27 | 2026-11-04 |
| CVE-2026-103312 The Payment Integration Wompi WordPress plugin through 4.0.1 does not verify the... |
medium | 5.3 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-103332 The Payex Payment Gateway for Woocommerce WordPress plugin through 1.2.10 does n... |
medium | 5.3 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-116840 llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf... |
medium | 6.1 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-116841 DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in... |
medium | 5.5 | — | — | 2026-10-27 | 2026-11-05 |
| CVE-2026-116842 DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in... |
medium | 6.1 | — | — | 2026-10-27 | 2026-10-31 |
| CVE-2026-116844 Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerab... |
medium | 4.8 | — | — | 2026-10-27 | 2026-10-29 |
| CVE-2026-116829 llama.cpp b10398 before b11301 contains an integer overflow vulnerability in ggu... |
medium | 6.6 | — | — | 2026-10-27 | 2026-11-02 |
| CVE-2026-116605 A vulnerability was found in SourceCodester Online Food Ordering System 1.0. |
medium | 5.3 | — | — | 2026-10-27 | 2026-10-31 |
| CVE-2026-116608 A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1... |
medium | 5.4 | — | — | 2026-10-27 | 2026-11-02 |
| CVE-2025-71439 llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama... |
medium | 5.5 | — | — | 2026-10-27 | 2026-11-05 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.