October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,412
High
6,177
Medium
6,472
Low
662
Severity not reported
2,758
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (422), apple (336), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-112192 MISP contains a vulnerability in the handling of module plugin settings. |
not reported | — | — | — | 2026-10-19 | 2026-10-30 |
| CVE-2026-112183 MISP contains a CSS injection vulnerability in the remote event preview feature. |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112161 MobaXterm Personal Edition (Portable) 26.4 GA extracts the CygUtils64.plugin fil... |
not reported | — | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-112178 MISP contains an access control flaw in the proposal (shadow attribute) visibili... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112179 In MISP, the event synchronization process contained a logic error in the prepar... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112180 MISP contains a data integrity flaw in its event deletion logic. |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-13695 SQL injection (SQLi) vulnerability—specifically a UNION-based vulnerability—in t... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-16487 Rejected reason: Red Hat Product Security has determined that this is not a vuln... |
not reported | — | — | — | 2026-10-19 | 2026-10-21 |
| CVE-2026-108121 Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-108120 Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerabilit... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-102503 Missing Authentication for Critical Function (CWE-306) and Missing Authorization... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-103091 Missing Authorization (CWE-862) and Initialization of a Resource with an Insecur... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112111 The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stor... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-112112 An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon al... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-108519 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-18 | 2026-10-18 |
| CVE-2026-98866 In the Linux kernel, the following vulnerability has been resolved:
sched/cache... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98867 In the Linux kernel, the following vulnerability has been resolved:
dm-pcache:... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98868 In the Linux kernel, the following vulnerability has been resolved:
dm-pcache:... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98856 In the Linux kernel, the following vulnerability has been resolved:
kprobes: Sk... |
not reported | — | — | — | 2026-10-18 | 2026-10-30 |
| CVE-2026-98857 In the Linux kernel, the following vulnerability has been resolved:
ipvs: bound... |
not reported | — | — | — | 2026-10-18 | 2026-10-30 |
| CVE-2026-98858 In the Linux kernel, the following vulnerability has been resolved:
io_uring: f... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98859 In the Linux kernel, the following vulnerability has been resolved:
HID: multit... |
not reported | — | — | — | 2026-10-18 | 2026-10-21 |
| CVE-2026-98860 In the Linux kernel, the following vulnerability has been resolved:
HID: bpf: c... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98861 In the Linux kernel, the following vulnerability has been resolved:
fprobe: Use... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98862 In the Linux kernel, the following vulnerability has been resolved:
audit: fix... |
not reported | — | — | — | 2026-10-18 | 2026-10-30 |
| CVE-2026-98863 In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: R... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98864 In the Linux kernel, the following vulnerability has been resolved:
sched_ext:... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98865 In the Linux kernel, the following vulnerability has been resolved:
sched_ext:... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98847 In the Linux kernel, the following vulnerability has been resolved:
rtc: spear:... |
not reported | — | — | — | 2026-10-18 | 2026-10-30 |
| CVE-2026-98848 In the Linux kernel, the following vulnerability has been resolved:
rtc: ac100:... |
not reported | — | — | — | 2026-10-18 | 2026-10-21 |
| CVE-2026-98849 In the Linux kernel, the following vulnerability has been resolved:
pfcp: fix s... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98850 In the Linux kernel, the following vulnerability has been resolved:
net/packet:... |
not reported | — | — | — | 2026-10-18 | 2026-10-30 |
| CVE-2026-98851 In the Linux kernel, the following vulnerability has been resolved:
netfilter:... |
not reported | — | — | — | 2026-10-18 | 2026-10-30 |
| CVE-2026-98852 In the Linux kernel, the following vulnerability has been resolved:
net: extend... |
not reported | — | — | — | 2026-10-18 | 2026-10-21 |
| CVE-2026-98853 In the Linux kernel, the following vulnerability has been resolved:
net: gso: l... |
not reported | — | — | — | 2026-10-18 | 2026-10-30 |
| CVE-2026-98854 In the Linux kernel, the following vulnerability has been resolved:
of/overlay:... |
not reported | — | — | — | 2026-10-18 | 2026-10-30 |
| CVE-2026-98855 In the Linux kernel, the following vulnerability has been resolved:
of/overlay:... |
not reported | — | — | — | 2026-10-18 | 2026-10-30 |
| CVE-2026-98838 In the Linux kernel, the following vulnerability has been resolved:
vt: skip sc... |
not reported | — | — | — | 2026-10-18 | 2026-10-30 |
| CVE-2026-98839 In the Linux kernel, the following vulnerability has been resolved:
vt: selecti... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98840 In the Linux kernel, the following vulnerability has been resolved:
vc_screen:... |
not reported | — | — | — | 2026-10-18 | 2026-10-30 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.