October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,599
Critical
3,298
High
7,980
Medium
7,646
Low
740
Severity not reported
4,935
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-118320 Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118327 Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118328 Improper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allo... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-118314 Improper input validation in UI in Google Chrome on on Android prior to 156.0.80... |
high | 8.8 | — | Google / chrome | 2026-10-27 | 2026-10-29 |
| CVE-2026-115504 CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2()... |
high | 7.8 | — | — | 2026-10-22 | 2026-10-29 |
| CVE-2026-115484 A flaw was found in the iscsiuio component of open-iscsi. |
high | 7.6 | — | — | 2026-10-23 | 2026-10-29 |
| CVE-2026-115372 Incus from 7.3.0 before 7.5.0 contains a project restriction bypass that allows... |
high | 8.5 | — | — | 2026-10-22 | 2026-10-29 |
| CVE-2026-115376 Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass... |
high | 7.7 | — | — | 2026-10-22 | 2026-10-29 |
| CVE-2026-115392 Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0... |
high | 7.9 | — | — | 2026-10-22 | 2026-10-29 |
| CVE-2026-115331 Lotus through 0.10.2 contains an sql injection vulnerability that allows authent... |
high | 8.8 | — | — | 2026-10-22 | 2026-10-29 |
| CVE-2026-115323 EverShop 1.2.2 before 2.2.1 contains a missing authorization vulnerability in th... |
high | 7.3 | — | — | 2026-10-22 | 2026-10-29 |
| CVE-2026-114605 dnspython is a DNS toolkit for Python. |
high | 7.5 | — | — | 2026-10-22 | 2026-10-29 |
| CVE-2026-112332 Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetD... |
high | 7.5 | — | — | 2026-10-22 | 2026-10-29 |
| CVE-2026-112904 Vvveb is a powerful and easy to use CMS with page builder to build websites, blo... |
high | 8.7 | — | — | 2026-10-23 | 2026-10-29 |
| CVE-2026-106764 An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbit... |
high | 7.5 | — | — | 2026-10-23 | 2026-10-29 |
| CVE-2026-110541 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS... |
high | 7.2 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2025-45528 An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local at... |
high | 7.3 | — | — | 2026-10-23 | 2026-10-29 |
| CVE-2026-103779 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS... |
high | 8.3 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2024-58393 i-Netsolution Readymade Unilevel Ecommerce MLM (2024-03-15 build) contains an SQ... |
high | 8.2 | — | — | 2026-10-22 | 2026-10-29 |
| CVE-2022-51023 PHPOK 4.5.000 before 5.4.081 contains an SQL injection vulnerability that allows... |
high | 8.2 | — | — | 2026-10-22 | 2026-10-29 |
| CVE-2026-97019 The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to... |
high | 7.2 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-92797 The MemberPress plugin for WordPress is vulnerable to Cross-Site Request Forgery... |
high | 8.8 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-86377 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS... |
high | 7.6 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-75891 The Kirki plugin for WordPress is vulnerable to Privilege Escalation via PHP Obj... |
high | 8.8 | — | — | 2026-10-27 | 2026-10-29 |
| CVE-2026-25716 Missing Authorization vulnerability in Hallo Welt! |
high | 7.1 | — | — | 2026-10-23 | 2026-10-29 |
| CVE-2026-116839 A malicious actor who lures an authenticated user to a malicious page could expl... |
high | 7.1 | — | — | 2026-10-27 | 2026-10-29 |
| CVE-2026-1928 The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress i... |
high | 8.8 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-15323 The Product Designer for WooCommerce WordPress | Lumise plugin for WordPress is... |
high | 7.5 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-115417 Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adap... |
high | 7.5 | — | — | 2026-10-22 | 2026-10-29 |
| CVE-2026-115807 The User Profile Builder – Beautiful User Registration Forms, User Profiles & Us... |
high | 7.1 | — | — | 2026-10-24 | 2026-10-29 |
| CVE-2026-116613 The Animated Text Block plugin for WordPress is vulnerable to Sensitive Informat... |
high | 7.5 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-111820 The Analytics Insights – Google Analytics Dashboard for WordPress plugin for Wor... |
high | 7.2 | — | — | 2026-10-27 | 2026-10-29 |
| CVE-2026-111314 The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin... |
high | 7.2 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-111111 The Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Ad... |
high | 7.2 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-110662 The MxChat – AI Chatbot & Content Generation for WordPress plugin for WordPress... |
high | 7.2 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-109995 The Advanced Views – Display Framework for Gutenberg & Elementor plugin for Word... |
high | 7.2 | — | — | 2026-10-27 | 2026-10-29 |
| CVE-2026-109384 The The Innovative Form Builder – IvyForms plugin for WordPress is vulnerable to... |
high | 8.8 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-103410 An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Netw... |
high | 7.5 | — | — | 2026-10-28 | 2026-10-29 |
| CVE-2026-101583 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel... |
high | 7.0 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-101593 Vulnerability in the Oracle Agile Product Lifecycle Management for Process produ... |
high | 8.3 | — | — | 2026-10-20 | 2026-10-29 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.