October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,209
Critical
3,102
High
7,090
Medium
6,615
Low
674
Severity not reported
4,728
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1176), google (780), ibm (323), mozilla (182), oracle (154), adobe (137), linux (126), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-59107 A security vulnerability has been identified in the vSolution Matrix file sharin... |
critical | 9.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-115931 Postiz lets a signed-in user ask the backend to run a function on one of their c... |
critical | 9.9 | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-115932 When a post is published, Postiz treats a media path that is not a web address a... |
critical | 9.6 | — | — | 2026-10-24 | 2026-10-26 |
| CVE-2026-115933 Postiz signs its session, invitation and password reset tokens with one shared s... |
critical | 9.9 | — | — | 2026-10-24 | 2026-10-26 |
| CVE-2026-110447 Collabora Online – Built-in CODE Server OS Command Injection Vulnerability |
critical | 9.8 | Listed | Collabora / Collabora Online – Built-in CODE Server | 2026-10-14 | 2026-10-26 |
| CVE-2026-69634 Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to e... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-69639 Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker... |
critical | 9.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-26 |
| CVE-2026-115188 An unrestricted file upload vulnerability exists in the campaign import feature... |
critical | 9.9 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-105010 Use after free in Microsoft Windows Search Component allows an unauthorized atta... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-105895 Adobe Experience Manager is affected by an Improper Input Validation vulnerabili... |
critical | 9.9 | — | Adobe / experience manager | 2026-10-13 | 2026-10-26 |
| CVE-2026-106626 Adobe Experience Manager is affected by an Improper Input Validation vulnerabili... |
critical | 9.1 | — | Adobe / experience manager | 2026-10-13 | 2026-10-26 |
| CVE-2026-106629 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
critical | 9.3 | — | Adobe / experience manager | 2026-10-13 | 2026-10-26 |
| CVE-2026-106630 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
critical | 9.3 | — | Adobe / experience manager | 2026-10-13 | 2026-10-26 |
| CVE-2026-79844 Authentication bypass vulnerabilities in the affected interface of AOS-10 could... |
critical | 10.0 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79846 Command injection vulnerabilities exist in the affected interface of AOS-8 that... |
critical | 10.0 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79847 Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead t... |
critical | 10.0 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79848 Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticate... |
critical | 10.0 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79849 Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticate... |
critical | 10.0 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79850 Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticate... |
critical | 10.0 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79851 Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that c... |
critical | 10.0 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79852 A vulnerability in the web-based management interface of AOS could allow an unau... |
critical | 9.8 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79853 Sensitive information disclosure vulnerabilities in the affected interface of AO... |
critical | 9.8 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79854 A vulnerability in the affected interface of AOS-10 could allow an unauthenticat... |
critical | 9.8 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79855 An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unau... |
critical | 9.8 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79856 A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could... |
critical | 9.8 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79857 There is a command injection vulnerability in the PAPI protocol (Aruba's access... |
critical | 9.8 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79858 An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AO... |
critical | 9.8 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79859 Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that co... |
critical | 9.8 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79860 Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that cou... |
critical | 9.8 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79861 There is a command injection vulnerability in AOS-10 that could lead to unauthen... |
critical | 9.8 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79862 Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 cou... |
critical | 9.6 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79863 Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 cou... |
critical | 9.6 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79864 Command injection vulnerabilities exist in the affected interface of AOS-10 that... |
critical | 9.6 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79865 A memory corruption vulnerability in the affected interface of AOS-10 could allo... |
critical | 9.6 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79866 An unauthenticated path traversal vulnerability exists in the PAPI protocol in A... |
critical | 9.6 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79867 Authentication bypass vulnerabilities in the affected interface of AOS-8 could a... |
critical | 9.6 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79868 Authentication bypass vulnerabilities in the affected interface of AOS-8 could a... |
critical | 9.6 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79869 Authentication bypass vulnerabilities in the affected interface of AOS-10 could... |
critical | 9.6 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79870 An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow... |
critical | 9.6 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79871 A sensitive information disclosure vulnerability in the command line interface o... |
critical | 9.6 | — | — | 2026-10-22 | 2026-10-26 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.