October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,595
Critical
3,298
High
7,976
Medium
7,646
Low
740
Severity not reported
4,935
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-101847 Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101840 Vulnerability in the Oracle Contract Lifecycle Management for Public Sector prod... |
high | 7.2 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101837 Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suit... |
high | 7.7 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101835 Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suit... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101833 Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suit... |
high | 7.6 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2026-101387 Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (compone... |
high | 7.6 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2016-20101 Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vuln... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2015-20123 Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vu... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-27 |
| CVE-2025-60751 GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDe... |
high | 7.5 | — | — | 2025-10-21 | 2026-10-27 |
| CVE-2025-52079 The administrator password setting of the D-Link DIR-820L 1.06B02 is has Imprope... |
high | 8.8 | — | Dlink / dir-820l firmware | 2025-10-21 | 2026-10-27 |
| CVE-2025-61035 The seffaflik thru 0.0.9 is vulnerable to symlink attacks due to incorrect defau... |
high | 7.7 | — | — | 2025-10-22 | 2026-10-27 |
| CVE-2025-60335 A NULL pointer dereference in the main function of TOTOLINK N600R v4.3.0cu.7866_... |
high | 7.5 | — | Totolink / n600r firmware | 2025-10-22 | 2026-10-27 |
| CVE-2025-50950 Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the Mo... |
high | 7.5 | — | Audiofile / audiofile | 2025-10-23 | 2026-10-27 |
| CVE-2025-60570 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the... |
high | 7.5 | — | Dlink / dir-600l firmware | 2025-10-24 | 2026-10-27 |
| CVE-2025-60549 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the... |
high | 7.5 | — | Dlink / dir-600l firmware | 2025-10-24 | 2026-10-27 |
| CVE-2025-60550 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the... |
high | 7.5 | — | Dlink / dir-600l firmware | 2025-10-24 | 2026-10-27 |
| CVE-2025-60552 D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the... |
high | 7.5 | — | Dlink / dir-600l firmware | 2025-10-24 | 2026-10-27 |
| CVE-2025-60424 A lack of rate limiting in the OTP verification component of Nagios Fusion v2024... |
high | 7.6 | — | Nagios / fusion | 2025-10-27 | 2026-10-27 |
| CVE-2025-61196 An issue in BusinessNext CRMnext v.10.8.3.0 allows a remote attacker to execute... |
high | 8.8 | — | — | 2025-10-30 | 2026-10-27 |
| CVE-2025-61498 A buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows... |
high | 7.5 | — | Tenda / ac8 firmware | 2025-10-30 | 2026-10-27 |
| CVE-2025-60749 DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.... |
high | 7.8 | — | — | 2025-10-31 | 2026-10-27 |
| CVE-2025-63561 Summer Pearl Group Vacation Rental Management Platform prior to 1.0.2 is suscept... |
high | 7.5 | — | Summerpearlgroup / vacation rental management platform | 2025-10-31 | 2026-10-27 |
| CVE-2025-63248 DWSurvey 6.14.0 is vulnerable to Incorrect Access Control. |
high | 7.5 | — | Diaowen / dwsurvey | 2025-11-05 | 2026-10-27 |
| CVE-2025-63417 A Stored Cross-Site Scripting (XSS) vulnerability in the chat functionality of t... |
high | 7.2 | — | Selfbest / selfbest | 2025-11-05 | 2026-10-27 |
| CVE-2026-58083 While the kernel was copying knotes during fork, a knote with a timer-based filt... |
high | 8.4 | — | Freebsd / freebsd | 2026-08-19 | 2026-10-27 |
| CVE-2026-58085 After dispatching a decrypt operation to OCF and receiving the result, the wg(4)... |
high | 7.5 | — | Freebsd / freebsd | 2026-08-19 | 2026-10-27 |
| CVE-2026-58086 As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was alway... |
high | 8.1 | — | Freebsd / freebsd | 2026-08-19 | 2026-10-27 |
| CVE-2026-58087 The GETALL and SETALL commands in semctl(2) recorded the number of semaphores in... |
high | 7.8 | — | Freebsd / freebsd | 2026-08-19 | 2026-10-27 |
| CVE-2026-58088 The ELF core dump code counted the number of dumpable VM map entries, allocated... |
high | 7.4 | — | Freebsd / freebsd | 2026-08-19 | 2026-10-27 |
| CVE-2026-75589 Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINT... |
high | 7.5 | — | — | 2026-08-19 | 2026-10-27 |
| CVE-2026-51367 An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker t... |
high | 7.5 | — | — | 2026-08-19 | 2026-10-27 |
| CVE-2026-14970 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing dur... |
high | 7.5 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-15061 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 's nimesis registration service co... |
high | 8.2 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-15078 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker... |
high | 8.1 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-16686 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to a... |
high | 8.2 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-16690 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to c... |
high | 7.5 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-16703 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to ga... |
high | 7.8 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-16706 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to c... |
high | 7.5 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-16814 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e... |
high | 8.8 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-91506 Vulnerability in the Workflow product of Oracle E-Business Suite (component: Wor... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-27 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.