October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,597
Critical
3,298
High
7,978
Medium
7,646
Low
740
Severity not reported
4,935
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-18415 ieee802154_send() in subsys/net/l2/ieee802154/ieee802154.c copies the outgoing p... |
high | 7.1 | — | Zephyrproject / zephyr | 2026-09-28 | 2026-10-27 |
| CVE-2026-106174 A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 throug... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-116836 A malicious actor with access to the adjacent network and under certain conditio... |
high | 8.8 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-116837 A malicious actor with access to the adjacent network could exploit a Heap-based... |
high | 8.8 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-116838 A malicious actor who lures an authenticated user to a malicious page could expl... |
high | 8.8 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-116871 Semantic MediaWiki 3.0.0 before 7.3.1 contains an uncontrolled recursion vulnera... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-116873 Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vuln... |
high | 7.3 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-116878 Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource con... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-116890 Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing authorization vuln... |
high | 7.3 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-116898 REDAXO before 5.21.4 contains a missing authorization vulnerability in the media... |
high | 7.1 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-24269 NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a ser... |
high | 7.1 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-65119 NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRou... |
high | 8.4 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-65120 NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a ser... |
high | 7.1 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-65151 NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a... |
high | 8.4 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-117536 REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the... |
high | 8.8 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-82121 Origin Validation Error Vulnerability in HiRDB. |
high | 7.5 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-100164 Observable response discrepancy vulnerability in Rolantis Information Technologi... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-92546 Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity In... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-112405 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112406 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112891 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112892 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112894 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112895 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112896 Pillow is a Python imaging library. |
high | 7.1 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-69987 Use after free in Remote Desktop Client allows an unauthorized attacker to execu... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-27 |
| CVE-2026-112901 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112623 A use-after-free issue was addressed with improved memory management. |
high | 8.8 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112626 A use-after-free issue was addressed with improved memory management. |
high | 8.8 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112637 A use-after-free issue was addressed with improved memory management. |
high | 8.8 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112651 A use-after-free issue was addressed with improved memory management. |
high | 8.8 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112655 A use-after-free issue was addressed with improved memory management. |
high | 8.8 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112659 A type confusion issue was addressed with improved memory handling. |
high | 8.8 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-112688 A memory corruption issue was addressed with improved memory handling. |
high | 8.8 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-64759 An integer overflow was addressed with improved input validation. |
high | 8.8 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-86916 A use after free issue was addressed with improved memory management. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-97164 Joomla Extension - svenbluege.de - Authenticated arbitrary path deletion in `cle... |
high | 8.1 | — | Svenbluege / event gallery | 2026-09-27 | 2026-10-27 |
| CVE-2026-100750 Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.... |
high | 7.5 | — | Regularlabs / modules anywhere | 2026-09-28 | 2026-10-27 |
| CVE-2026-91494 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
high | 7.4 | — | Oracle / identity manager connector | 2026-10-20 | 2026-10-27 |
| CVE-2026-91493 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
high | 7.5 | — | Oracle / identity manager connector | 2026-10-20 | 2026-10-27 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.