October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,597
Critical
3,298
High
7,978
Medium
7,646
Low
740
Severity not reported
4,935
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2014-125138 C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engin... |
high | 8.8 | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-103600 Uncontrolled recursion in the ASN.1 parser (Asn1InputStream, Asn1StreamParser) i... |
high | 7.5 | — | Bouncycastle / bc-csharp | 2026-10-02 | 2026-10-28 |
| CVE-2026-77167 Abusing the federated share endpoint, an attacker can write arbitrary rows into... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-114596 In EPICS Base release 7.0.10 and prior, an improper validation of message length... |
high | 8.2 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-114597 In EPICS Base release 7.0.10 and prior, an insufficient validation of element or... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-114598 In EPICS Base release 7.0.10 and prior, an insufficient validation of element or... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-111582 A DLL loading vulnerability in the
TeamViewer Remote Management Monitoring insta... |
high | 7.3 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-111583 Improper access control in the installer
staging directory used by TeamViewer Fu... |
high | 7.3 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-111584 A race condition in the installation
process of TeamViewer Remote Management - P... |
high | 7.3 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-111585 An integer overflow in the remote-control
screen processing component of TeamVie... |
high | 8.8 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-92372 An out-of-bounds write vulnerability in the
screen-image decoder of TeamViewer F... |
high | 8.8 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-92374 A time-of-check time-of-use (TOCTOU) race condition combined with improper symbo... |
high | 7.8 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-92375 An improper access control vulnerability in
the IPC communication between TeamVi... |
high | 7.8 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-92376 Improper authentication in the
inter-process communication (IPC) mechanism of Te... |
high | 7.8 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-92377 Improper access control in the Patch
Management update mechanism of TeamViewer F... |
high | 7.8 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-103601 Release of unverified plaintext in the CCM (CcmBlockCipher) and DSTU 7624 CCM (K... |
high | 7.5 | — | Bouncycastle / bc-csharp | 2026-10-02 | 2026-10-28 |
| CVE-2026-112350 Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the ra... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-112351 Sunhillo SureLine before 9.1.5 contains an OS command injection vulnerability in... |
high | 8.8 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-63575 Loop with unreachable exit condition in the PKCS#12 key derivation (Pkcs12Parame... |
high | 7.5 | — | Bouncycastle / bc-csharp | 2026-10-02 | 2026-10-28 |
| CVE-2026-63576 Improper certificate validation in PkixNameConstraintValidator (ExtractHostFromU... |
high | 7.5 | — | Bouncycastle / bc-csharp | 2026-10-02 | 2026-10-28 |
| CVE-2026-63577 Improper certificate validation in the directoryName name-constraint check (Pkix... |
high | 7.5 | — | Bouncycastle / bc-csharp | 2026-10-02 | 2026-10-28 |
| CVE-2026-63578 Allocation of resources without limits in password-based private-key decryption... |
high | 7.5 | — | Bouncycastle / bc-csharp | 2026-10-02 | 2026-10-28 |
| CVE-2026-58257 GRR is a resource management and reservation application. |
high | 7.2 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-57195 Asterisk is an open source private branch exchange and telephony toolkit. |
high | 7.5 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-87358 Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (c... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87359 Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (com... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87363 Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (componen... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-87357 Vulnerability in the Order Capture product of Oracle E-Business Suite (component... |
high | 7.2 | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-68567 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-08-18 | 2026-10-28 |
| CVE-2026-114096 Dulwich from 0.24.0 before 1.2.8 contains a symlink following vulnerability in p... |
high | 7.8 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-114106 HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a path traversal vulnerabili... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-109089 A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could ov... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-109090 A malicious X server could cause a heap overflow by injecting a large DEVICE_ENA... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-108303 Tanium addressed an unauthorized code execution vulnerability in Certificate Man... |
high | 8.8 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-108304 Tanium addressed a local privilege escalation vulnerability in End-User Notifica... |
high | 7.8 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-108305 Tanium addressed a local privilege escalation vulnerability in End-User Notifica... |
high | 7.8 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-108306 Tanium addressed a local privilege escalation vulnerability in End-User Notifica... |
high | 7.8 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-108307 Tanium addressed a heap-based buffer overflow vulnerability in Index. |
high | 7.8 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-108329 Tanium addressed an unauthorized code execution vulnerability in Threat Response... |
high | 8.8 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-116647 Tanium addressed an improper output sanitization vulnerability in Comply. |
high | 7.1 | — | — | 2026-10-27 | 2026-10-28 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.