October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-80353 Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-113394 A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. |
high | 7.4 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-113395 A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 8218. |
high | 7.4 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-113396 A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. |
high | 7.4 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-34485 Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability w... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-113619 In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH b... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-113392 A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. |
high | 7.4 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-105941 The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-105311 The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant w... |
high | 7.7 | — | — | 2026-10-20 | 2026-11-03 |
| CVE-2026-105949 Cruise Control's Jetty ConstraintSecurityHandler registers security constraints... |
high | 8.8 | — | — | 2026-10-20 | 2026-11-03 |
| CVE-2026-113356 DokuWiki before 2026-07-14c contains a PHP object injection vulnerability in Dra... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-113358 LavaLite CMS through 10.1.2 contains a missing authentication vulnerability in t... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-113351 libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because... |
high | 7.5 | — | Libexpat Project / libexpat | 2026-10-20 | 2026-11-03 |
| CVE-2026-113352 uTox through 0.18.1 contains a path traversal vulnerability that allows Tox frie... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-108089 ** UNSUPPORTED WHEN ASSIGNED ** Exposure of sensitive system information to an u... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-108086 ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity referen... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-108087 ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of special elements used... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-108088 ** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vu... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-113381 A weakness has been identified in Osclass up to 8.3.1. |
high | 7.3 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-92287 Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and Py... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-113469 A failure has been identified in the SNS during dynamic data files signature che... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-113406 BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. |
high | 8.8 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-113407 BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. |
high | 8.8 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-111090 A logic error exists in the signature verification routine resulting in acceptan... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-112177 A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. |
high | 7.3 | — | — | 2026-10-20 | 2026-11-04 |
| CVE-2026-113405 BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. |
high | 8.8 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-113404 WebITR developed by Uniong has a Insecure Deserialization vulnerability. |
high | 8.8 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-97627 Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) pro... |
high | 7.2 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-93300 The EventON - Subscriber plugin for WordPress is vulnerable to generic SQL Injec... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-113386 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP comm... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-86467 Apache Airflow Amazon provider: the AWS auth manager's SAML login flow does not... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-105299 Summary
Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed... |
high | 8.7 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-86977 An authorization issue was addressed with improved network restrictions. |
high | 7.5 | — | Apple / ipados | 2026-10-20 | 2026-11-03 |
| CVE-2026-86948 This issue was addressed by enforcing library validation on the affected binarie... |
high | 8.8 | — | Apple / xcode | 2026-10-20 | 2026-10-30 |
| CVE-2026-86949 This issue was addressed by enforcing library validation on the affected binarie... |
high | 8.8 | — | Apple / xcode | 2026-10-20 | 2026-10-29 |
| CVE-2026-86961 A race condition was addressed with additional validation. |
high | 7.8 | — | Apple / ipados | 2026-10-20 | 2026-11-02 |
| CVE-2026-86919 A stack overflow was addressed with improved input validation. |
high | 8.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-86922 A type confusion issue was addressed with improved state management. |
high | 8.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-84579 A logic issue was addressed with improved checks. |
high | 8.8 | — | Apple / macos | 2026-10-20 | 2026-11-03 |
| CVE-2026-77937 Letta through 0.16.8 contains an authentication bypass vulnerability that allows... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-20 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.