October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-77926 Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenti... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-77934 Coze Studio before 0.5.0 contains an insecure default configuration that allows... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-77935 Coze Studio through 0.5.1 contains an insecure direct object reference vulnerabi... |
high | 8.3 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-28853 The issue was addressed with improved checks. |
high | 7.8 | — | Apple / macos | 2026-10-20 | 2026-11-03 |
| CVE-2026-28854 The issue was addressed with additional app bundle integrity checks. |
high | 7.5 | — | Apple / macos | 2026-10-20 | 2026-10-29 |
| CVE-2026-109440 LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-109443 JoySafeter through 1.0.0 contains a remote code execution vulnerability that all... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-105297 Summary
Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's defau... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-109126 IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appl... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-107366 IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perf... |
high | 8.3 | — | Langflow / langflow | 2026-10-20 | 2026-11-03 |
| CVE-2026-107400 IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authen... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-105453 IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through... |
high | 8.4 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-53995 MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileSto... |
high | 8.2 | — | — | 2026-10-19 | 2026-11-02 |
| CVE-2026-112901 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112892 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112893 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-28 |
| CVE-2026-112894 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112895 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112896 Pillow is a Python imaging library. |
high | 7.1 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112405 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112406 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112891 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112399 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-28 |
| CVE-2026-112400 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112401 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112402 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112404 Pillow is a Python imaging library. |
high | 8.2 | — | Python / pillow | 2026-10-19 | 2026-10-28 |
| CVE-2026-112360 A security vulnerability has been detected in Netis EAP930 1.250905.115454. |
high | 8.0 | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-112392 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-26 |
| CVE-2026-112396 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-26 |
| CVE-2026-112397 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112257 A flaw was found in GIMP. |
high | 7.8 | — | — | 2026-10-19 | 2026-11-04 |
| CVE-2026-112258 A flaw was found in GIMP. |
high | 7.8 | — | — | 2026-10-19 | 2026-11-04 |
| CVE-2026-112261 A flaw was found in GIMP. |
high | 7.8 | — | — | 2026-10-19 | 2026-11-04 |
| CVE-2026-76788 The OSDP Control Panel reply parser cp_decode_response() in subsys/mgmt/osdp/src... |
high | 8.8 | — | — | 2026-10-19 | 2026-11-04 |
| CVE-2026-112390 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-23 |
| CVE-2026-112391 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-23 |
| CVE-2026-112394 Pillow is a Python imaging library. |
high | 8.2 | — | Python / pillow | 2026-10-19 | 2026-10-26 |
| CVE-2026-112395 Pillow is a Python imaging library. |
high | 8.2 | — | Python / pillow | 2026-10-19 | 2026-10-28 |
| CVE-2026-112301 A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. |
high | 7.3 | — | — | 2026-10-19 | 2026-10-20 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.