October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-111804 Apache Traffic Server's experimental wasm plugin has a use-after-free in its tra... |
high | 8.2 | — | — | 2026-10-21 | 2026-10-23 |
| CVE-2025-55702 When a client sends a POST with Expect: 100-continue and the origin answers befo... |
high | 8.7 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2025-31699 Apache Traffic Server can return an origin connection to the shared pool while t... |
high | 8.9 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-92206 CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vu... |
high | 8.8 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-92207 MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability. |
high | 8.8 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-92208 NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability. |
high | 8.8 | — | — | 2026-10-21 | 2026-10-23 |
| CVE-2026-92209 NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability... |
high | 7.8 | — | — | 2026-10-21 | 2026-10-23 |
| CVE-2026-92210 NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability... |
high | 7.2 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-89035 MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability i... |
high | 7.4 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-92183 GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnera... |
high | 7.8 | — | — | 2026-10-21 | 2026-10-23 |
| CVE-2026-92202 Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Exe... |
high | 7.8 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-92203 Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forger... |
high | 7.7 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-92204 Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery... |
high | 7.7 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-114493 LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerabil... |
high | 8.6 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-114262 A vulnerability was determined in file-management-system dc9ce1bf27f94b23d906cb1... |
high | 7.3 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-114263 A vulnerability was identified in ProjectWorlds Advanced Library Management Syst... |
high | 7.3 | — | — | 2026-10-21 | 2026-10-23 |
| CVE-2026-110744 A flaw was found in multicluster-global-hub-operator-bundle. |
high | 7.2 | — | — | 2026-10-21 | 2026-10-23 |
| CVE-2026-111184 NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation... |
high | 7.8 | — | — | 2026-10-21 | 2026-10-23 |
| CVE-2026-76495 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 7.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-76496 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 7.0 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-76505 A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Soft... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-76524 A vulnerability in the control channel socket implementation of Open Source Snor... |
high | 7.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-76490 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.6 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-76491 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-76492 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-76493 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-76494 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 7.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-76476 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-76477 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-76478 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-76479 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 7.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-76481 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-21 |
| CVE-2026-20236 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-26 |
| CVE-2026-20291 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 7.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-20356 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-114259 A flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f1... |
high | 7.3 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-114261 A vulnerability was found in MomoTommy file-management-system dc9ce1bf27f94b23d9... |
high | 7.3 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-114123 D365 F&O MCP Server is a Model Context Protocol server for querying Dynamics 365... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-114258 A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1... |
high | 7.3 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-114489 Missing authorization in the REST and COM administration APIs of Progressive Rob... |
high | 8.1 | — | — | 2026-10-21 | 2026-10-29 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.