October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,412
High
6,177
Medium
6,472
Low
662
Severity not reported
2,758
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (422), apple (336), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-0313 A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex... |
not reported | — | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-0314 A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windo... |
not reported | — | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-0315 A local privilege escalation vulnerability in the Palo Alto Networks GlobalProte... |
not reported | — | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-0316 A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS®... |
not reported | — | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-0317 A denial of service vulnerability in Palo Alto Networks PAN-OS software enables... |
not reported | — | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-0311 A server-side request forgery vulnerability in Palo Alto Networks Checkov by Pri... |
not reported | — | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-55384 InvoiceShelf is an open-source web & mobile app that helps track expenses, payme... |
not reported | — | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-55386 InvoiceShelf is an open-source web & mobile app that helps track expenses, payme... |
not reported | — | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-55387 InvoiceShelf is an open-source web & mobile app that helps track expenses, payme... |
not reported | — | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-54566 Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code... |
not reported | — | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-54701 Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code... |
not reported | — | — | — | 2026-10-14 | 2026-10-20 |
| CVE-2026-54702 Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code... |
not reported | — | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-54703 Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code... |
not reported | — | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-0321 Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow a... |
not reported | — | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-82402 Gogs is an open source self-hosted Git service. |
not reported | — | — | — | 2026-10-14 | 2026-10-20 |
| CVE-2026-109506 Multiple
TP-Link Wi-Fi range extenders use a custom, reversible XOR-and-dictiona... |
not reported | — | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-104141 DataEase is an open source data visualization and analysis tool. |
not reported | — | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-104142 DataEase is an open source data visualization and analysis tool. |
not reported | — | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-104143 DataEase is an open source data visualization and analysis tool. |
not reported | — | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102756 DataEase is an open source data visualization and analysis tool. |
not reported | — | — | — | 2026-10-14 | 2026-10-20 |
| CVE-2026-102899 Sentry is an application monitoring and error tracking platform. |
not reported | — | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102748 Dgraph is an open source distributed GraphQL database. |
not reported | — | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102755 DataEase is an open source data visualization and analysis tool. |
not reported | — | — | — | 2026-10-14 | 2026-10-14 |
| CVE-2026-100406 dbt enables data analysts and engineers to transform their data using the same p... |
not reported | — | — | — | 2026-10-14 | 2026-10-20 |
| CVE-2026-92152 F´ (F Prime) is a framework that enables development and deployment of spaceflig... |
not reported | — | — | — | 2026-10-14 | 2026-10-29 |
| CVE-2026-76083 Redash is a package for data visualization and sharing. |
not reported | — | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-77371 Redash is a package for data visualization and sharing. |
not reported | — | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-42093 Redash is a package for data visualization and sharing. |
not reported | — | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-106465 The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly genera... |
not reported | — | — | — | 2026-10-14 | 2026-11-04 |
| CVE-2026-106464 `_nx_secure_x509_parse_signature_data` computes the certificate signature's leng... |
not reported | — | — | — | 2026-10-14 | 2026-11-04 |
| CVE-2026-103414 The GUIX binary resource (theme) loader sizes its arena and populates it in two... |
not reported | — | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-103415 When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cook... |
not reported | — | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102476 In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], th... |
not reported | — | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-96596 Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang O... |
not reported | — | — | — | 2026-10-14 | 2026-10-22 |
| CVE-2026-94200 Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl... |
not reported | — | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-67418 RabbitMQ is a messaging and streaming broker. |
not reported | — | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-59951 The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model... |
not reported | — | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-105659 Uncontrolled Resource Consumption vulnerability in mtrudel bandit allows an unau... |
not reported | — | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-105236 Improper Certificate Validation vulnerability in the ssl application in Erlang/O... |
not reported | — | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-67414 RabbitMQ is a messaging and streaming broker. |
not reported | — | — | — | 2026-10-14 | 2026-10-29 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.