October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,412
High
6,177
Medium
6,472
Low
662
Severity not reported
2,758
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (422), apple (336), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2023-42991 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2023-42992 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2023-42993 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2023-42994 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2023-42995 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2023-42996 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2023-42997 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2023-42998 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2023-42999 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2024-54582 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-27 |
| CVE-2024-54583 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-27 |
| CVE-2024-54584 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-27 |
| CVE-2024-54585 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-27 |
| CVE-2024-54586 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-27 |
| CVE-2024-54587 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-27 |
| CVE-2023-42990 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112768 Parse Server before 8.6.99 and 9.0.0 before 9.10.3-alpha.2 evaluates checks agai... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112769 Parse Server before 8.6.98 and 9.0.0 before 9.10.3-alpha.1 does not enforce the... |
not reported | — | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2024-54581 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-27 |
| CVE-2026-55644 Element X iOS is a Matrix iOS Client provided by Element. |
not reported | — | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-111755 follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically f... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-105810 Tapo C320WS
V2.0 contains an authenticated stack-based buffer overflow in the lo... |
not reported | — | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-111749 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. |
not reported | — | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-111750 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. |
not reported | — | — | — | 2026-10-19 | 2026-10-28 |
| CVE-2026-111063 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. |
not reported | — | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-111064 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. |
not reported | — | — | — | 2026-10-19 | 2026-10-28 |
| CVE-2026-111065 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-111066 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. |
not reported | — | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-111748 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-103038 PingTools Network Utilities 4.64 contains an OS command injection vulnerability... |
not reported | — | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-77225 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-77227 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-77228 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-12254 Netskope is notified about a potential gap in its agent (NSClient) where a syste... |
not reported | — | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-111046 FOSSBilling is an open source billing and client-management platform. |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-111053 FOSSBilling is an open source billing and client-management platform. |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-111056 FOSSBilling is an open source billing and client-management platform. |
not reported | — | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-8168 Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSv... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112184 MISP contains a reflected cross-site scripting (XSS) vulnerability in the workfl... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112188 MISP contains a vulnerability in its server settings lookup mechanism that allow... |
not reported | — | — | — | 2026-10-19 | 2026-10-28 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.