October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,544
Critical
3,297
High
7,958
Medium
7,628
Low
740
Severity not reported
4,921
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-96943 Integer overflow or wraparound in Windows Raw Image Extension allows an unauthor... |
high | 8.8 | — | Microsoft / raw image extension | 2026-10-13 | 2026-10-16 |
| CVE-2026-97788 Observable discrepancy in Active Directory Federation Services (AD FS) allows an... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-97789 Use after free in Remote Desktop Client allows an unauthorized attacker to execu... |
high | 7.5 | — | Microsoft / windows server 2022 | 2026-10-13 | 2026-10-16 |
| CVE-2026-96843 Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate pr... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-96844 Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an a... |
high | 8.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-96847 Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-105959 A flaw was found in spice-server. |
high | 7.5 | — | — | 2026-10-16 | 2026-10-16 |
| CVE-2026-105958 A flaw was found in spice-server. |
high | 7.5 | — | — | 2026-10-16 | 2026-10-16 |
| CVE-2026-96852 Use after free in Windows TCP/IP allows an authorized attacker to elevate privil... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-108546 Spotweb through 1.5.8 contains an OS command injection vulnerability in the runc... |
high | 7.5 | — | — | 2026-10-10 | 2026-10-16 |
| CVE-2026-108758 Easy!Appointments through 1.6.0 contains an authorization bypass vulnerability i... |
high | 8.2 | — | — | 2026-10-11 | 2026-10-16 |
| CVE-2026-109398 Gumlet php-image-resize before 3.0.1 contains a denial of service vulnerability... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-111210 A vulnerability was determined in bitcoinj up to 0.17. |
high | 7.3 | — | — | 2026-10-16 | 2026-10-16 |
| CVE-2026-108161 FusionPBX through 5.6.5 contains an OS command injection vulnerability in call_r... |
high | 7.5 | — | — | 2026-10-10 | 2026-10-16 |
| CVE-2026-108548 AstronRPA through 1.1.6 contains an authentication bypass vulnerability in the O... |
high | 7.3 | — | — | 2026-10-10 | 2026-10-16 |
| CVE-2026-108550 SkillHub before 0.2.22 contains an incorrect authorization vulnerability in Acco... |
high | 8.8 | — | — | 2026-10-10 | 2026-10-16 |
| CVE-2026-108695 MultiVendorX WordPress plugin through 5.0.19 contains an incorrect authorization... |
high | 7.1 | — | — | 2026-10-11 | 2026-10-16 |
| CVE-2026-108708 Wukong_HRM through commit 186115e contains a missing authorization vulnerability... |
high | 8.8 | — | — | 2026-10-11 | 2026-10-16 |
| CVE-2026-108714 MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnera... |
high | 7.5 | — | — | 2026-10-11 | 2026-10-16 |
| CVE-2026-108739 OpenAgents Workspace backend through launcher-v1.0.17 contains an information di... |
high | 7.5 | — | — | 2026-10-11 | 2026-10-16 |
| CVE-2026-108740 GoatCounter through 2.7.0 contains a mass assignment privilege escalation vulner... |
high | 8.3 | — | — | 2026-10-11 | 2026-10-16 |
| CVE-2026-108746 Vearch 3.5.2 through 3.5.9 contains an incorrect authorization vulnerability in... |
high | 8.8 | — | — | 2026-10-11 | 2026-10-16 |
| CVE-2026-108760 LlamaFarm through 0.0.34 contains an insecure default configuration that binds i... |
high | 7.6 | — | — | 2026-10-11 | 2026-10-16 |
| CVE-2026-108853 UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnera... |
high | 8.1 | — | — | 2026-10-11 | 2026-10-16 |
| CVE-2026-108863 Katanemo Plano through 0.4.37 contains a missing authentication vulnerability th... |
high | 7.5 | — | — | 2026-10-11 | 2026-10-16 |
| CVE-2026-108865 AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that... |
high | 8.2 | — | — | 2026-10-11 | 2026-10-16 |
| CVE-2026-108953 mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that a... |
high | 7.8 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-109238 Crawl4AI 0.7.0 before 0.9.4 contains a server-side request forgery vulnerability... |
high | 8.6 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-109360 MONAI 0.4.0 before 1.6.1 contains a remote code execution vulnerability that all... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2020-37279 easy-pdf-merge 0.1.0 through 0.2.6 contains an OS command injection vulnerabilit... |
high | 8.1 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2020-37280 cbor-sync through 1.0.4 contains a resource exhaustion vulnerability in CBOR.dec... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2021-48011 Servor 1.0.0 through 4.0.2 contains a path traversal vulnerability that allows u... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-109380 modern-tar 0.3.5 through 0.8.5 contains a memory exhaustion vulnerability that a... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-109426 Telegram-Stremio through 5.1.0 contains an insecure storage vulnerability that a... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-109558 EdgeEver 1.6.0 through 1.112.0 contains a stored cross-site scripting vulnerabil... |
high | 8.7 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-109560 Continue CLI (@continuedev/cli) through 1.5.47 contains a permission bypass vuln... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-109568 Shaark 1.2.13 through 1.2.44 contains a missing authorization vulnerability in t... |
high | 7.1 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-109965 Serena before 2.0.0 contains an improper link resolution vulnerability that allo... |
high | 7.1 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-110097 Ikaros 1.2.0 through 1.2.5 contains an authentication bypass vulnerability that... |
high | 8.1 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-110124 FastBee through 2.1.0 contains an insecure direct object reference vulnerability... |
high | 8.1 | — | — | 2026-10-13 | 2026-10-16 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.