October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,597
Critical
3,298
High
7,978
Medium
7,646
Low
740
Severity not reported
4,935
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2023-34119 Insecure temporary file in the installer for Zoom Rooms for Windows before versi... |
high | 7.8 | — | Zoom / rooms | 2023-07-11 | 2026-10-28 |
| CVE-2023-46718 A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 an... |
high | 7.8 | — | Fortinet / fortios | 2025-10-14 | 2026-10-28 |
| CVE-2023-53692 In the Linux kernel, the following vulnerability has been resolved:
ext4: fix u... |
high | 7.8 | — | — | 2025-10-22 | 2026-10-28 |
| CVE-2023-53695 In the Linux kernel, the following vulnerability has been resolved:
udf: Detect... |
high | 7.8 | — | — | 2025-10-22 | 2026-10-28 |
| CVE-2023-53698 In the Linux kernel, the following vulnerability has been resolved:
xsk: fix re... |
high | 7.8 | — | — | 2025-10-22 | 2026-10-28 |
| CVE-2023-53705 In the Linux kernel, the following vulnerability has been resolved:
ipv6: Fix o... |
high | 8.2 | — | — | 2025-10-22 | 2026-10-28 |
| CVE-2023-53707 In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu:... |
high | 7.8 | — | — | 2025-10-22 | 2026-10-28 |
| CVE-2023-53711 In the Linux kernel, the following vulnerability has been resolved:
NFS: Fix a... |
high | 8.2 | — | — | 2025-10-22 | 2026-10-28 |
| CVE-2023-53713 In the Linux kernel, the following vulnerability has been resolved:
arm64: sme:... |
high | 7.8 | — | — | 2025-10-22 | 2026-10-28 |
| CVE-2023-53718 In the Linux kernel, the following vulnerability has been resolved:
ring-buffer... |
high | 7.8 | — | — | 2025-10-22 | 2026-10-28 |
| CVE-2023-53726 In the Linux kernel, the following vulnerability has been resolved:
arm64: csum... |
high | 7.1 | — | — | 2025-10-22 | 2026-10-28 |
| CVE-2023-53729 In the Linux kernel, the following vulnerability has been resolved:
soc: qcom:... |
high | 7.8 | — | — | 2025-10-22 | 2026-10-28 |
| CVE-2023-49440 AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the "preview parameter." |
high | 8.8 | — | — | 2025-10-27 | 2026-10-28 |
| CVE-2023-7324 In the Linux kernel, the following vulnerability has been resolved:
scsi: ses:... |
high | 8.1 | — | — | 2025-10-29 | 2026-10-28 |
| CVE-2023-53965 SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability th... |
high | 7.8 | — | Sound4 / playout ula8 firmware | 2025-12-22 | 2026-10-28 |
| CVE-2023-53969 Screen SFT DAB 600/C firmware 1.9.3 contains a session management vulnerability... |
high | 7.5 | — | Dbbroadcast / sft dab 600\/c firmware | 2025-12-22 | 2026-10-28 |
| CVE-2023-53973 Zillya Total Security 3.0.2367.0 contains a privilege escalation vulnerability t... |
high | 7.8 | — | Zillya / total security | 2025-12-22 | 2026-10-28 |
| CVE-2023-54193 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
high | 7.8 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54198 In the Linux kernel, the following vulnerability has been resolved:
tty: fix ou... |
high | 7.8 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54200 In the Linux kernel, the following vulnerability has been resolved:
netfilter:... |
high | 7.8 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54201 In the Linux kernel, the following vulnerability has been resolved:
RDMA/efa: F... |
high | 7.8 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54202 In the Linux kernel, the following vulnerability has been resolved:
drm/i915: f... |
high | 7.8 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54206 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
high | 7.8 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54207 In the Linux kernel, the following vulnerability has been resolved:
HID: uclogi... |
high | 7.8 | — | Linux / linux kernel | 2025-12-30 | 2026-10-28 |
| CVE-2023-54210 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
high | 7.8 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54214 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
high | 8.8 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54216 In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e:... |
high | 7.8 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54219 In the Linux kernel, the following vulnerability has been resolved:
Revert "IB/... |
high | 7.5 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54220 In the Linux kernel, the following vulnerability has been resolved:
serial: 825... |
high | 7.8 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54227 In the Linux kernel, the following vulnerability has been resolved:
blk-mq: fix... |
high | 7.5 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-54234 In the Linux kernel, the following vulnerability has been resolved:
scsi: mpi3m... |
high | 7.8 | — | — | 2025-12-30 | 2026-10-28 |
| CVE-2023-3634 In products of the MSE6 product-family by Festo a remote authenticated, low priv... |
high | 8.8 | — | — | 2026-04-16 | 2026-10-28 |
| CVE-2023-54345 Frappe Framework ERPNext 13.4.0 contains a sandbox escape vulnerability in Restr... |
high | 8.8 | — | Frappe / erpnext | 2026-05-05 | 2026-10-28 |
| CVE-2023-54346 WordPress Plugin Backup Migration 1.2.8 contains an information disclosure vulne... |
high | 7.5 | — | — | 2026-05-05 | 2026-10-28 |
| CVE-2023-54347 OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows a... |
high | 7.5 | — | Open-emr / openemr | 2026-05-05 | 2026-10-28 |
| CVE-2023-54348 ERPGo SaaS 3.9 contains a CSV injection vulnerability that allows authenticated... |
high | 8.8 | — | — | 2026-05-05 | 2026-10-28 |
| CVE-2023-42344 Alkacon OpenCms before 10.5.1 allows remote unauthenticated attackers to obtain... |
high | 7.3 | — | — | 2026-05-08 | 2026-10-28 |
| CVE-2023-42346 Alkacon OpenCms before 16 allows XXE when the refers to an external host. |
high | 7.5 | — | — | 2026-05-08 | 2026-10-28 |
| CVE-2023-27753 An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to... |
high | 8.0 | — | — | 2026-05-12 | 2026-10-28 |
| CVE-2023-54357 Joomla com_booking component 2.4.9 contains an information disclosure vulnerabil... |
high | 7.5 | — | Artio / book it\! | 2026-06-19 | 2026-10-28 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.