October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-93631 A cross-site request forgery vulnerability in the OAuth extension of Zimbra Coll... |
high | 7.1 | — | Synacor / zimbra collaboration suite | 2026-10-23 | 2026-10-28 |
| CVE-2026-93639 A missing authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows... |
high | 8.7 | — | — | 2026-10-23 | 2026-10-28 |
| CVE-2026-93640 A local privilege escalation vulnerability in the optional dnscache package of Z... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-50056 A local privilege escalation vulnerability in the zmmailboxdmgr launcher of Zimb... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-29 |
| CVE-2026-50057 A local privilege escalation vulnerability in the Zimbra Collaboration Suite (ZC... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-29 |
| CVE-2026-114621 baserCMS is a website development framework. |
high | 8.8 | — | — | 2026-10-23 | 2026-10-29 |
| CVE-2026-114622 baserCMS is a website development framework. |
high | 7.2 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-114624 baserCMS is a website development framework. |
high | 7.2 | — | — | 2026-10-23 | 2026-10-29 |
| CVE-2026-115457 baserCMS is a website development framework. |
high | 7.1 | — | — | 2026-10-23 | 2026-10-29 |
| CVE-2026-10632 A reflected cross-site scripting vulnerability in the Classic Web Client of Zimb... |
high | 8.7 | — | — | 2026-10-23 | 2026-10-28 |
| CVE-2026-99081 In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: fi... |
high | 7.5 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-99082 In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: U... |
high | 8.8 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-99083 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix... |
high | 8.8 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-99077 In the Linux kernel, the following vulnerability has been resolved:
ipv4: udp:... |
high | 7.4 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-99064 In the Linux kernel, the following vulnerability has been resolved:
cipso: adju... |
high | 8.1 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99054 In the Linux kernel, the following vulnerability has been resolved:
tipc: destr... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-99056 In the Linux kernel, the following vulnerability has been resolved:
strparser:... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-99059 In the Linux kernel, the following vulnerability has been resolved:
wireguard:... |
high | 7.7 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-99046 In the Linux kernel, the following vulnerability has been resolved:
gve: fix XS... |
high | 7.5 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99050 In the Linux kernel, the following vulnerability has been resolved:
gpio: mpsse... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99051 In the Linux kernel, the following vulnerability has been resolved:
fsverity: R... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99053 In the Linux kernel, the following vulnerability has been resolved:
tipc: hold... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-99042 In the Linux kernel, the following vulnerability has been resolved:
io_uring/ne... |
high | 8.4 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99030 In the Linux kernel, the following vulnerability has been resolved:
net: skbuff... |
high | 7.5 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99032 In the Linux kernel, the following vulnerability has been resolved:
net/smc: pr... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-99013 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99014 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99016 In the Linux kernel, the following vulnerability has been resolved:
riscv: fute... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99017 In the Linux kernel, the following vulnerability has been resolved:
riscv: erra... |
high | 7.0 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99018 In the Linux kernel, the following vulnerability has been resolved:
riscv: entr... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99006 In the Linux kernel, the following vulnerability has been resolved:
drm/i915/ge... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-99011 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
high | 7.1 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99012 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-98999 In the Linux kernel, the following vulnerability has been resolved:
drm/xe: Fix... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-99002 In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx:... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-98991 In the Linux kernel, the following vulnerability has been resolved:
namespace:... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98993 In the Linux kernel, the following vulnerability has been resolved:
namespace:... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-98995 In the Linux kernel, the following vulnerability has been resolved:
namespace:... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98982 In the Linux kernel, the following vulnerability has been resolved:
namespace:... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98988 In the Linux kernel, the following vulnerability has been resolved:
namespace:... |
high | 8.8 | — | — | 2026-10-23 | 2026-10-24 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.