October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
23,949
Critical
3,231
High
7,652
Medium
7,322
Low
724
Severity not reported
5,020
In CISA KEV
190
Most affected vendors (by CPE data where available): microsoft (1400), google (802), linux (663), ibm (323), mozilla (182), oracle (157), adobe (155), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-69634 Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to e... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-69639 Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker... |
critical | 9.8 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-26 |
| CVE-2026-115188 An unrestricted file upload vulnerability exists in the campaign import feature... |
critical | 9.9 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-105010 Use after free in Microsoft Windows Search Component allows an unauthorized atta... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-26 |
| CVE-2026-105895 Adobe Experience Manager is affected by an Improper Input Validation vulnerabili... |
critical | 9.9 | — | Adobe / experience manager | 2026-10-13 | 2026-10-26 |
| CVE-2026-106626 Adobe Experience Manager is affected by an Improper Input Validation vulnerabili... |
critical | 9.1 | — | Adobe / experience manager | 2026-10-13 | 2026-10-26 |
| CVE-2026-106629 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
critical | 9.3 | — | Adobe / experience manager | 2026-10-13 | 2026-10-26 |
| CVE-2026-106630 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
critical | 9.3 | — | Adobe / experience manager | 2026-10-13 | 2026-10-26 |
| CVE-2026-79844 Authentication bypass vulnerabilities in the affected interface of AOS-10 could... |
critical | 10.0 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79846 Command injection vulnerabilities exist in the affected interface of AOS-8 that... |
critical | 10.0 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79847 Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead t... |
critical | 10.0 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79848 Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticate... |
critical | 10.0 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79849 Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticate... |
critical | 10.0 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79850 Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticate... |
critical | 10.0 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79851 Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that c... |
critical | 10.0 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79852 A vulnerability in the web-based management interface of AOS could allow an unau... |
critical | 9.8 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79853 Sensitive information disclosure vulnerabilities in the affected interface of AO... |
critical | 9.8 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79854 A vulnerability in the affected interface of AOS-10 could allow an unauthenticat... |
critical | 9.8 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79855 An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unau... |
critical | 9.8 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79856 A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could... |
critical | 9.8 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79857 There is a command injection vulnerability in the PAPI protocol (Aruba's access... |
critical | 9.8 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79858 An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AO... |
critical | 9.8 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79859 Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that co... |
critical | 9.8 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79860 Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that cou... |
critical | 9.8 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79861 There is a command injection vulnerability in AOS-10 that could lead to unauthen... |
critical | 9.8 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79862 Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 cou... |
critical | 9.6 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79863 Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 cou... |
critical | 9.6 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79864 Command injection vulnerabilities exist in the affected interface of AOS-10 that... |
critical | 9.6 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79865 A memory corruption vulnerability in the affected interface of AOS-10 could allo... |
critical | 9.6 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79866 An unauthenticated path traversal vulnerability exists in the PAPI protocol in A... |
critical | 9.6 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79867 Authentication bypass vulnerabilities in the affected interface of AOS-8 could a... |
critical | 9.6 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79868 Authentication bypass vulnerabilities in the affected interface of AOS-8 could a... |
critical | 9.6 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79869 Authentication bypass vulnerabilities in the affected interface of AOS-10 could... |
critical | 9.6 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79870 An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow... |
critical | 9.6 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79871 A sensitive information disclosure vulnerability in the command line interface o... |
critical | 9.6 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79872 A buffer overflow vulnerability exists in the underlying operating system of AOS... |
critical | 9.4 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79873 Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow... |
critical | 9.3 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79874 An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent... |
critical | 9.3 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79875 A vulnerability has been identified in the PAPI protocol of AOS-8 that could pot... |
critical | 9.3 | — | — | 2026-10-22 | 2026-10-26 |
| CVE-2026-79876 A sensitive information disclosure vulnerability in the Wi-Fi frame processing o... |
critical | 9.3 | — | — | 2026-10-22 | 2026-10-26 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.