October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,596
Critical
3,297
High
7,980
Medium
7,645
Low
740
Severity not reported
4,934
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-104795 The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`)... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-30 |
| CVE-2026-103963 A flaw was found in glib-networking. |
high | 7.5 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-93851 Mattermost versions 11.9.x |
high | 8.0 | — | — | 2026-10-28 | 2026-10-30 |
| CVE-2026-96196 Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows a... |
high | 8.8 | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-96198 Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthor... |
high | 8.8 | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-96199 Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthor... |
high | 8.8 | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-96203 Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacke... |
high | 8.8 | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-92982 A flaw was found in Ansible Operator Plugins. |
high | 8.5 | — | — | 2026-10-15 | 2026-10-30 |
| CVE-2026-90867 Improper access control in the Web Admin console of Progress Software WS_FTP Ser... |
high | 8.1 | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-88077 Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unau... |
high | 8.8 | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-86398 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS... |
high | 8.8 | — | — | 2026-10-28 | 2026-10-30 |
| CVE-2026-86399 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS... |
high | 7.2 | — | — | 2026-10-28 | 2026-10-30 |
| CVE-2026-86395 Dell PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0... |
high | 7.2 | — | — | 2026-10-28 | 2026-10-30 |
| CVE-2026-86396 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS... |
high | 8.8 | — | — | 2026-10-28 | 2026-10-30 |
| CVE-2026-86389 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS... |
high | 7.2 | — | — | 2026-10-28 | 2026-10-30 |
| CVE-2026-86393 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS... |
high | 7.2 | — | — | 2026-10-28 | 2026-10-30 |
| CVE-2026-86394 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS... |
high | 7.2 | — | — | 2026-10-28 | 2026-10-30 |
| CVE-2026-85890 Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker t... |
high | 8.8 | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-85897 Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthor... |
high | 8.8 | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-85899 Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker... |
high | 8.1 | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-43961 A flaw was found in Vim's netrw plugin. |
high | 7.8 | — | — | 2026-08-19 | 2026-10-30 |
| CVE-2026-20586 In vdec, there is a possible out of bounds write due to a missing bounds check. |
high | 8.8 | — | Mediatek / mt8910 firmware | 2026-10-05 | 2026-10-30 |
| CVE-2026-96889 A flaw was found in librsvg. |
high | 7.8 | — | — | 2026-09-23 | 2026-10-30 |
| CVE-2026-86320 A flaw was found in flatpak-builder where Git hooks are not disabled when applyi... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-30 |
| CVE-2026-74860 A flaw was found in libxml2 with Python bindings enabled. |
high | 8.5 | — | — | 2026-09-08 | 2026-10-30 |
| CVE-2026-15801 A vulnerability was found in CRI-O related to the container checkpoint and resto... |
high | 8.0 | — | — | 2026-09-21 | 2026-10-30 |
| CVE-2026-58013 A flaw was found in GLib. |
high | 8.2 | — | Gnome / glib | 2026-06-30 | 2026-10-29 |
| CVE-2026-58011 A flaw was found in GLib. |
high | 7.5 | — | Gnome / glib | 2026-06-30 | 2026-10-29 |
| CVE-2026-58012 A flaw was found in GLib. |
high | 8.2 | — | Gnome / glib | 2026-06-30 | 2026-10-29 |
| CVE-2026-58010 A flaw was found in GLib. |
high | 8.2 | — | Gnome / glib | 2026-06-30 | 2026-10-29 |
| CVE-2026-16118 A flaw was found in xdgmime. |
high | 7.1 | — | — | 2026-07-17 | 2026-10-29 |
| CVE-2026-96280 The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O an... |
high | 7.5 | — | — | 2026-09-27 | 2026-10-29 |
| CVE-2026-89058 A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all o... |
high | 7.4 | — | — | 2026-09-18 | 2026-10-29 |
| CVE-2026-61719 WeGIA is a web manager for charitable institutions. |
high | 8.9 | — | — | 2026-10-29 | 2026-10-29 |
| CVE-2026-93589 ImageMagick before 7.1.2-31 and 6.9.13-56 contains a division-by-zero flaw in th... |
high | 7.5 | — | Imagemagick / imagemagick | 2026-09-18 | 2026-10-29 |
| CVE-2026-86421 ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL imag... |
high | 7.5 | — | Imagemagick / imagemagick | 2026-09-07 | 2026-10-29 |
| CVE-2026-90932 LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerabilit... |
high | 7.2 | — | — | 2026-09-14 | 2026-10-29 |
| CVE-2026-85168 n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution... |
high | 8.8 | — | N8n / n8n | 2026-09-03 | 2026-10-29 |
| CVE-2026-85169 n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox e... |
high | 8.8 | — | N8n / n8n | 2026-09-03 | 2026-10-29 |
| CVE-2026-86420 ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory bud... |
high | 7.5 | — | Imagemagick / imagemagick | 2026-09-07 | 2026-10-29 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.