October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-98499 In the Linux kernel, the following vulnerability has been resolved:
HID: wacom:... |
high | 8.1 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98485 In the Linux kernel, the following vulnerability has been resolved:
netfilter:... |
high | 7.1 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98487 In the Linux kernel, the following vulnerability has been resolved:
net: bridge... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98479 In the Linux kernel, the following vulnerability has been resolved:
scsi: libis... |
high | 7.5 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98466 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
high | 8.2 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98469 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
high | 7.1 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98471 In the Linux kernel, the following vulnerability has been resolved:
KVM: SEV: D... |
high | 7.1 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98456 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
high | 7.0 | — | — | 2026-10-18 | 2026-10-30 |
| CVE-2026-98465 In the Linux kernel, the following vulnerability has been resolved:
RISC-V: KVM... |
high | 7.0 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98451 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
high | 8.8 | — | — | 2026-10-18 | 2026-10-30 |
| CVE-2026-98454 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
high | 8.1 | — | — | 2026-10-18 | 2026-10-30 |
| CVE-2026-98440 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
high | 7.0 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98441 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98442 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-24 |
| CVE-2026-98443 In the Linux kernel, the following vulnerability has been resolved:
xfs: fix cu... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-30 |
| CVE-2026-98436 In the Linux kernel, the following vulnerability has been resolved:
accel/amdxd... |
high | 7.8 | — | — | 2026-10-18 | 2026-10-26 |
| CVE-2026-111990 A weakness has been identified in kishan0725 Hospital Management System up to 77... |
high | 7.3 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-112021 snac2 before 2.93 contains a heap-based buffer overflow vulnerability in _xs_jso... |
high | 7.5 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-78497 JQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's r... |
high | 8.4 | — | — | 2026-10-18 | 2026-10-20 |
| CVE-2026-112015 Omnigent 0.3.0 before 0.14.0 contains a path traversal vulnerability that allows... |
high | 7.5 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-112018 cgltf through 1.15 contains a heap out-of-bounds write vulnerability in cgltf_ac... |
high | 7.0 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-112000 Vanus 0.8.0 through 0.9.0 contains a missing authorization vulnerability in the... |
high | 7.6 | — | — | 2026-10-18 | 2026-10-22 |
| CVE-2026-112001 ProjectSend 2.0.0 before 2.7.0 contains an incorrect authorization vulnerability... |
high | 7.2 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-112005 WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows... |
high | 7.7 | — | — | 2026-10-18 | 2026-10-22 |
| CVE-2026-111999 Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that a... |
high | 7.5 | — | — | 2026-10-18 | 2026-10-20 |
| CVE-2026-110895 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti... |
high | 8.5 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-110897 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-108485 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-109895 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-110373 Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone nu... |
high | 8.1 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-110382 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-110383 Authorization Bypass Through User-Controlled Key vulnerability in WP E-Signature... |
high | 7.5 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-107436 Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials... |
high | 8.8 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-96534 The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Cal... |
high | 7.7 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-110031 The Salon Booking System WordPress plugin before 10.31.11 does not prevent users... |
high | 7.2 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-110981 The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly esc... |
high | 7.1 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-111873 A vulnerability was detected in itsmeravitejak Online-Examination-System up to e... |
high | 7.3 | — | — | 2026-10-18 | 2026-10-22 |
| CVE-2026-111871 A weakness has been identified in itsmeravitejak Online-Examination-System up to... |
high | 7.3 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-111872 A security vulnerability has been detected in itsmeravitejak Online-Examination-... |
high | 7.3 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-111866 A weakness has been identified in nemoTyrant manong up to 7c9e5228e133b9267ad3a4... |
high | 7.3 | — | — | 2026-10-18 | 2026-10-19 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.