October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-115609 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-115612 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-116391 Deserialization of Untrusted Data vulnerability in GS Plugins GS Logo Slider gs-... |
high | 8.8 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-116392 Deserialization of Untrusted Data vulnerability in PickPlugins Accordion accordi... |
high | 7.2 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-116393 Missing Authorization vulnerability in iHomefinder, Inc. |
high | 7.5 | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-111850 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti... |
high | 8.5 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-115591 Insertion of Sensitive Information Into Sent Data vulnerability in Supsystic Con... |
high | 7.5 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-115593 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-115596 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-115606 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-118485 Axel Download Accelerator 2.17.14 and earlier performs URL percent-decoding (htt... |
high | 8.1 | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-99216 In the Linux kernel, the following vulnerability has been resolved:
Drivers: hv... |
high | 8.4 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99212 In the Linux kernel, the following vulnerability has been resolved:
net/rds: do... |
high | 7.0 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99213 In the Linux kernel, the following vulnerability has been resolved:
vsock: trea... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99203 In the Linux kernel, the following vulnerability has been resolved:
pipe: prese... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99185 In the Linux kernel, the following vulnerability has been resolved:
firewire: c... |
high | 8.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99177 In the Linux kernel, the following vulnerability has been resolved:
KVM: SEV: F... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99180 In the Linux kernel, the following vulnerability has been resolved:
unicode: fr... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99167 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99170 In the Linux kernel, the following vulnerability has been resolved:
namespace:... |
high | 8.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99173 In the Linux kernel, the following vulnerability has been resolved:
eventfs: Fr... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99163 In the Linux kernel, the following vulnerability has been resolved:
tracing/his... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99164 In the Linux kernel, the following vulnerability has been resolved:
spi: imx: f... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99152 In the Linux kernel, the following vulnerability has been resolved:
scsi: libis... |
high | 7.5 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99156 In the Linux kernel, the following vulnerability has been resolved:
scsi: st: F... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99142 In the Linux kernel, the following vulnerability has been resolved:
tracing: Ch... |
high | 7.1 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99143 In the Linux kernel, the following vulnerability has been resolved:
tracing: Ke... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99148 In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu:... |
high | 7.0 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99136 In the Linux kernel, the following vulnerability has been resolved:
dm-crypt: f... |
high | 7.0 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99131 In the Linux kernel, the following vulnerability has been resolved:
xfs: fix ca... |
high | 8.2 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99116 In the Linux kernel, the following vulnerability has been resolved:
net: psp: d... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99117 In the Linux kernel, the following vulnerability has been resolved:
net: bridge... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99122 In the Linux kernel, the following vulnerability has been resolved:
vsock/vmci:... |
high | 7.3 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99123 In the Linux kernel, the following vulnerability has been resolved:
vsock/virti... |
high | 7.1 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99107 In the Linux kernel, the following vulnerability has been resolved:
ntfs: fix i... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99109 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
high | 7.8 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99110 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
high | 7.0 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-99112 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
high | 7.1 | — | — | 2026-10-28 | 2026-10-31 |
| CVE-2026-87102 Sensitive information disclosure and manipulation due to improper token validati... |
high | 7.4 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-87103 Sensitive information disclosure and manipulation due to improper token validati... |
high | 7.4 | — | — | 2026-10-28 | 2026-10-29 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.