October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,412
High
6,177
Medium
6,472
Low
662
Severity not reported
2,758
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (422), apple (336), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-98447 In the Linux kernel, the following vulnerability has been resolved:
xfs: fix wi... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98448 In the Linux kernel, the following vulnerability has been resolved:
xfs: releas... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98449 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98450 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
not reported | — | — | — | 2026-10-18 | 2026-10-30 |
| CVE-2026-98452 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98453 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
not reported | — | — | — | 2026-10-18 | 2026-10-30 |
| CVE-2026-98455 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98444 In the Linux kernel, the following vulnerability has been resolved:
xfs: drop d... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98445 In the Linux kernel, the following vulnerability has been resolved:
xfs: don't... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98446 In the Linux kernel, the following vulnerability has been resolved:
xfs: don't... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98433 In the Linux kernel, the following vulnerability has been resolved:
KVM: PPC: B... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98434 In the Linux kernel, the following vulnerability has been resolved:
sysctl: Che... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98435 In the Linux kernel, the following vulnerability has been resolved:
EDAC/altera... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98437 In the Linux kernel, the following vulnerability has been resolved:
media: qcom... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98438 In the Linux kernel, the following vulnerability has been resolved:
mptcp: opti... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-98439 In the Linux kernel, the following vulnerability has been resolved:
smb/server:... |
not reported | — | — | — | 2026-10-18 | 2026-10-26 |
| CVE-2026-111997 ip-address before 10.7.4 allows a denial of service (CPU consumption from quadra... |
not reported | — | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-105391 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-17 | 2026-10-18 |
| CVE-2026-107274 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-17 | 2026-10-18 |
| CVE-2026-107345 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-17 | 2026-10-18 |
| CVE-2026-107772 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-17 | 2026-10-18 |
| CVE-2026-108117 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-17 | 2026-10-18 |
| CVE-2026-106549 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-16 | 2026-10-18 |
| CVE-2026-107346 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-16 | 2026-10-18 |
| CVE-2026-108372 Open and provider-neutral, LoopX is a lightweight state kernel and local-first c... |
not reported | — | — | — | 2026-10-16 | 2026-10-21 |
| CVE-2026-96620 Claude Agent SDK is a Python SDK for Claude Code. |
not reported | — | — | — | 2026-10-16 | 2026-10-21 |
| CVE-2026-86009 Mailu is a mail server distributed as a set of Docker images. |
not reported | — | — | — | 2026-10-16 | 2026-10-21 |
| CVE-2026-95859 libp2p-rust is the official Rust language implementation of the libp2p networkin... |
not reported | — | — | — | 2026-10-16 | 2026-10-21 |
| CVE-2026-68906 libIEC61850 is an open-source implementation of IEC 61850 client and server prot... |
not reported | — | — | — | 2026-10-16 | 2026-10-19 |
| CVE-2026-68907 libIEC61850 is an open-source implementation of IEC 61850 client and server prot... |
not reported | — | — | — | 2026-10-16 | 2026-10-16 |
| CVE-2026-55543 TuxGuitar is an open-source guitar tablature editor. |
not reported | — | — | — | 2026-10-16 | 2026-10-28 |
| CVE-2026-111593 Rejected reason: This CVE ID was reserved for a reported issue in the PDF Invoic... |
not reported | — | — | — | 2026-10-16 | 2026-10-16 |
| CVE-2026-14452 Improper validation of the reset_url parameter of the Setup in-page search in Ch... |
not reported | — | — | — | 2026-10-16 | 2026-10-16 |
| CVE-2026-106030 NordVPN for Windows allows local attackers to stop unprotected Windows system se... |
not reported | — | — | — | 2026-10-16 | 2026-10-16 |
| CVE-2026-111472 An SQL injection vulnerability has been discovered in TSG Profleet. |
not reported | — | — | — | 2026-10-16 | 2026-10-16 |
| CVE-2026-101300 Server-Side Request Forgery (SSRF) reported in the ticket sales chart PDF export... |
not reported | — | — | — | 2026-10-16 | 2026-10-16 |
| CVE-2026-111458 The fanx_fingerprint function in ssl/sslxprint.c of ssldump allocates a heap buf... |
not reported | — | — | — | 2026-10-16 | 2026-10-16 |
| CVE-2026-111442 Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 does not suffici... |
not reported | — | — | — | 2026-10-16 | 2026-10-21 |
| CVE-2026-109812 A missing authorization vulnerability exists in the internal API `/api/v1/secret... |
not reported | — | — | — | 2026-10-16 | 2026-10-16 |
| CVE-2026-109813 A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of... |
not reported | — | — | — | 2026-10-16 | 2026-10-16 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.