October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-78164 Improper Neutralization of Special Elements Used in a Template Engine and Exposu... |
high | 8.2 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-78165 Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis com... |
high | 8.8 | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-112104 A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. |
high | 7.3 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-79633 vulnerability in Apache Answer. |
high | 8.1 | — | — | 2026-10-19 | 2026-11-03 |
| CVE-2026-64943 Insertion of Sensitive Information into Log File vulnerability in Apache Answer. |
high | 8.1 | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-64945 A vulnerability in Apache Answer. |
high | 7.5 | — | — | 2026-10-19 | 2026-11-03 |
| CVE-2026-76994 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apac... |
high | 7.5 | — | — | 2026-10-19 | 2026-11-03 |
| CVE-2026-111408 Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey M... |
high | 8.8 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-108823 Exposure of Sensitive Information to an Unauthorized Actor during job manipulati... |
high | 7.5 | — | — | 2026-10-19 | 2026-11-03 |
| CVE-2026-108833 Default startup profile miss security settings in Apache Kylin. |
high | 7.5 | — | — | 2026-10-19 | 2026-11-04 |
| CVE-2026-108837 Allocation of resources without limits or throttling vulnerability in Apache Kyl... |
high | 7.5 | — | — | 2026-10-19 | 2026-11-03 |
| CVE-2026-110379 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-111398 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') v... |
high | 7.7 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-108762 Path-confinement bypass during metadata backup deletion in Apache Kylin. |
high | 7.3 | — | — | 2026-10-19 | 2026-10-30 |
| CVE-2026-104679 VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML externa... |
high | 7.1 | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-16460 A flaw was found in bootc and ostree. |
high | 7.4 | — | — | 2026-10-19 | 2026-11-04 |
| CVE-2026-76740 A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms,... |
high | 7.2 | — | — | 2026-10-19 | 2026-10-21 |
| CVE-2026-112082 A vulnerability was identified in sgl-project SGLang up to 0.5.19. |
high | 7.5 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-111440 在 openGauss-connector-jdbc 的 pgjdbc/src/main/java/org/postgresql/log/LogFactor... |
high | 7.0 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112044 A security vulnerability has been detected in dotnet eShop up to 913acea66708a59... |
high | 7.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-111441 在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中，内置函数 HllObj... |
high | 8.1 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-108984 A vulnerability is in Web Server default connection ports under the process name... |
high | 7.5 | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-112025 A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d... |
high | 7.3 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-107618 `POST /{owner}/{repo}/topics` was registered without the sign-in middleware that... |
high | 8.1 | — | — | 2026-10-18 | 2026-10-29 |
| CVE-2026-109553 Gitea resolved the principals of an SSH certificate by searching the content of... |
high | 7.5 | — | — | 2026-10-18 | 2026-11-02 |
| CVE-2026-98550 In the Linux kernel, the following vulnerability has been resolved:
tipc: rejec... |
high | 7.5 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98555 In the Linux kernel, the following vulnerability has been resolved:
llc: fix sk... |
high | 7.5 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98543 In the Linux kernel, the following vulnerability has been resolved:
bpf: fs/xat... |
high | 7.3 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98532 In the Linux kernel, the following vulnerability has been resolved:
ipv6: do no... |
high | 8.1 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98517 In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98518 In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau... |
high | 7.0 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98520 In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd:... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98524 In the Linux kernel, the following vulnerability has been resolved:
rds: ib: Cl... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98510 In the Linux kernel, the following vulnerability has been resolved:
drm/xe/vm:... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98512 In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau... |
high | 7.1 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98515 In the Linux kernel, the following vulnerability has been resolved:
drm/nouveau... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98501 In the Linux kernel, the following vulnerability has been resolved:
HID: alps:... |
high | 7.1 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98507 In the Linux kernel, the following vulnerability has been resolved:
mm/rmap: fi... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-30 |
| CVE-2026-98491 In the Linux kernel, the following vulnerability has been resolved:
net: openvs... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98497 In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e:... |
high | 7.5 | — | — | 2026-10-18 | 2026-10-24 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.