October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,211
Critical
3,265
High
7,853
Medium
7,531
Low
729
Severity not reported
4,833
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-18172 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
high | 7.4 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-07 |
| CVE-2026-18137 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
high | 8.1 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-07 |
| CVE-2026-49880 In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds wri... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-18177 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
high | 7.1 | — | Ibm / financial transaction manager | 2026-09-23 | 2026-10-07 |
| CVE-2026-18181 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
high | 8.1 | — | Ibm / financial transaction manager | 2026-09-23 | 2026-10-07 |
| CVE-2026-49885 In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-18184 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
high | 7.4 | — | Ibm / financial transaction manager | 2026-09-23 | 2026-10-07 |
| CVE-2026-18185 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
high | 7.3 | — | Ibm / financial transaction manager | 2026-09-23 | 2026-10-07 |
| CVE-2026-18490 IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to un... |
high | 8.8 | — | Ibm / financial transaction manager | 2026-09-23 | 2026-10-07 |
| CVE-2026-18875 IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to RA... |
high | 7.3 | — | Ibm / financial transaction manager | 2026-09-23 | 2026-10-07 |
| CVE-2026-19179 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
high | 8.2 | — | Ibm / financial transaction manager | 2026-09-23 | 2026-10-07 |
| CVE-2025-43510 Apple Multiple Products Improper Locking Vulnerability |
high | 7.8 | Listed | Apple / Multiple Products | 2025-12-12 | 2026-10-07 |
| CVE-2025-43529 Apple Multiple Products Use-After-Free WebKit Vulnerability |
high | 8.8 | Listed | Apple / Multiple Products | 2025-12-17 | 2026-10-07 |
| CVE-2026-42418 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-06 | 2026-10-07 |
| CVE-2026-42638 Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy... |
high | 7.5 | — | — | 2026-10-06 | 2026-10-07 |
| CVE-2026-12405 A flaw was found in rubygem-foreman_remote_execution. |
high | 8.8 | — | — | 2026-10-01 | 2026-10-07 |
| CVE-2026-100507 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-09-30 | 2026-10-07 |
| CVE-2026-56906 In ep_free of eventpoll.c, there is a possible use-after-free due to a race cond... |
high | 7.0 | — | — | 2026-10-06 | 2026-10-07 |
| CVE-2026-105985 Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerabilit... |
high | 8.8 | — | — | 2026-10-06 | 2026-10-07 |
| CVE-2026-101207 Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior... |
high | 8.8 | — | — | 2026-10-06 | 2026-10-07 |
| CVE-2026-88394 WookTeam v1.6.6 and before is vulnerable to a Directory Traversal. |
high | 7.5 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-88396 ApiAdmin v5.0 and before is vulnerable to Directory Traversal. |
high | 7.2 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105166 A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb8... |
high | 7.3 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-105170 A weakness has been identified in kishor-23 food-waste-management-system 411989e... |
high | 7.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105182 A security flaw has been discovered in SourceCodester Online Reviewer Management... |
high | 7.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105149 A security flaw has been discovered in mooSocial up to 3.2.4. |
high | 7.3 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-105089 WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability... |
high | 8.7 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-82524 UnoPim before 2.1.5 contains an authenticated file upload vulnerability that all... |
high | 7.2 | — | — | 2026-09-02 | 2026-10-06 |
| CVE-2026-84292 fast-uri serializes the port component of a URI without validating it. |
high | 7.5 | — | Openjsf / fast-uri | 2026-09-02 | 2026-10-06 |
| CVE-2026-97818 phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all"... |
high | 8.6 | — | — | 2026-09-25 | 2026-10-06 |
| CVE-2026-86104 An uncontrolled resource consumption vulnerability in the Fireware OS login proc... |
high | 7.5 | — | Watchguard / fireware | 2026-09-30 | 2026-10-06 |
| CVE-2026-86105 An improper authorization vulnerability in Fireware OS's Access Portal reverse p... |
high | 7.1 | — | Watchguard / fireware | 2026-09-30 | 2026-10-06 |
| CVE-2026-86128 A NULL pointer dereference vulnerability in Fireware OS's NetFlow packet-process... |
high | 7.5 | — | Watchguard / fireware | 2026-09-30 | 2026-10-06 |
| CVE-2026-86132 An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon (i... |
high | 7.5 | — | Watchguard / fireware | 2026-09-30 | 2026-10-06 |
| CVE-2026-86133 An integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon (ike... |
high | 7.5 | — | Watchguard / fireware | 2026-09-30 | 2026-10-06 |
| CVE-2026-86136 A missing authorization vulnerability in the wgagent management daemon's session... |
high | 8.1 | — | Watchguard / fireware | 2026-09-30 | 2026-10-06 |
| CVE-2026-95140 kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulnerability in... |
high | 7.5 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-85523 Improper neutralization of special elements used in an OS command ('OS command i... |
high | 8.8 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-106443 WeasyPrint helps web developers to create PDF documents. |
high | 8.8 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-106103 Quasar Framework is a framework for building high-performance Vue.js user interf... |
high | 7.1 | — | — | 2026-10-06 | 2026-10-06 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.