October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,527
Critical
3,295
High
7,946
Medium
7,626
Low
739
Severity not reported
4,921
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-96540 An improper access control vulnerability has been identified in the SonicWall Ne... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-85634 A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of th... |
high | 8.8 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-109237 Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that a... |
high | 8.1 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-109353 LibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unpri... |
high | 7.1 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-109357 LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization a... |
high | 8.1 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-110857 GitPython before 3.2.0 contains a remote code execution vulnerability that allow... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-109363 ZcashFoundation Zebra 6.4.0 before 6.4.2 parses version 6 transactions carrying... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-96577 A flaw was found in oc-mirror. |
high | 7.1 | — | — | 2026-10-01 | 2026-10-15 |
| CVE-2026-85951 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 1... |
high | 8.5 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-85952 Affected Linux-based Progress MarkLogic Server 12.x releases before 12.1.0 and 1... |
high | 8.5 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-85968 Progress MarkLogic Server 12.x releases before 12.1.0 contain an out-of-bounds r... |
high | 7.1 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-85969 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 1... |
high | 7.1 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-85970 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 1... |
high | 7.1 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-75939 A flaw was found in openshift/oc-mirror. |
high | 7.4 | — | — | 2026-09-21 | 2026-10-15 |
| CVE-2026-65149 NVIDIA DALI contains a vulnerability where an attacker could cause an uncontroll... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-65150 NVIDIA DALI contains a vulnerability where an attacker could cause an uncontroll... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-65147 NVIDIA DALI contains a vulnerability where an attacker could cause an uncontroll... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-109757 Sandbox escape due to race condition in the Networking component. |
high | 8.3 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-109730 Integer overflow in the Graphics component. |
high | 8.8 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-109733 JIT miscompilation in the JavaScript Engine: JIT component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-109753 Incorrect boundary conditions in the Layout component. |
high | 8.1 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-108184 Improper certificate validation in certain Zoom Clients for Windows may allow an... |
high | 7.4 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-108185 Improper certificate validation in the My Notes feature of certain Zoom Clients... |
high | 7.4 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-67223 RabbitMQ is a messaging and streaming broker. |
high | 7.1 | — | Broadcom / rabbitmq server | 2026-09-25 | 2026-10-15 |
| CVE-2026-96611 FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. |
high | 7.8 | — | Ffmpeg / ffmpeg | 2026-09-23 | 2026-10-15 |
| CVE-2026-30754 A memory corruption vulnerability exists in FFmpeg before 8.1. |
high | 8.8 | — | Ffmpeg / ffmpeg | 2026-09-08 | 2026-10-15 |
| CVE-2026-92151 F´ (F Prime) is a framework that enables development and deployment of spaceflig... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-92154 F´ (F Prime) is a framework that enables development and deployment of spaceflig... |
high | 8.1 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-86562 A flaw was found in DPDK lib/vhost. |
high | 7.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-85959 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 1... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-85961 On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-85962 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 1... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-85963 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 1... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-85964 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 1... |
high | 7.7 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-85965 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 1... |
high | 8.0 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-85966 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 1... |
high | 7.7 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-85975 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 1... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-85953 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 1... |
high | 8.5 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-85958 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 1... |
high | 7.5 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-79838 A buffer overflow vulnerability in HPE NonStop ODBC/MX Services may cause memory... |
high | 7.3 | — | — | 2026-10-15 | 2026-10-15 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.