October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,179
Critical
3,264
High
7,847
Medium
7,522
Low
728
Severity not reported
4,818
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-104069 HortusFox before 6.2 contains a remote code execution vulnerability in ThemeModu... |
high | 7.2 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2019-25777 YAML versions before 1.27_001 for Perl allow a loaded perl/glob document to repl... |
high | 7.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-103241 A flaw has been found in vllm-project vLLM up to 0.26.0. |
high | 7.5 | — | Vllm / vllm | 2026-09-30 | 2026-10-06 |
| CVE-2026-90906 Joomla! |
high | 8.3 | — | Joomla / joomla\! | 2026-09-29 | 2026-10-06 |
| CVE-2026-102424 Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates loca... |
high | 7.5 | — | Balbooa / forms | 2026-09-29 | 2026-10-06 |
| CVE-2026-73598 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16,... |
high | 7.8 | — | Dell / policy manager for secure connect gateway | 2026-09-29 | 2026-10-06 |
| CVE-2026-63718 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')... |
high | 7.5 | — | Apache / http server | 2026-10-01 | 2026-10-06 |
| CVE-2026-100254 In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 authenticated users c... |
high | 8.8 | — | Jetbrains / teamcity | 2026-09-30 | 2026-10-06 |
| CVE-2026-100253 In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 sandbox escape leadin... |
high | 8.8 | — | Jetbrains / teamcity | 2026-09-30 | 2026-10-06 |
| CVE-2026-92227 Joomla! |
high | 7.5 | — | Joomla / joomla\! | 2026-09-29 | 2026-10-06 |
| CVE-2026-92222 Joomla! |
high | 8.0 | — | Joomla / joomla\! | 2026-09-29 | 2026-10-06 |
| CVE-2026-84074 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
high | 8.9 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84071 IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the U... |
high | 7.2 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84070 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
high | 8.9 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84036 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
high | 7.4 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84034 IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulne... |
high | 8.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-81937 IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerabi... |
high | 7.2 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-81446 Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Ser... |
high | 7.4 | — | Dell / openmanage server administrator | 2026-09-17 | 2026-10-06 |
| CVE-2026-81445 Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Im... |
high | 7.2 | — | Dell / openmanage server administrator | 2026-09-17 | 2026-10-06 |
| CVE-2026-80356 Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Ex... |
high | 7.3 | — | Dell / openmanage server administrator | 2026-09-17 | 2026-10-06 |
| CVE-2026-81442 Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Im... |
high | 8.1 | — | Dell / openmanage server administrator | 2026-09-17 | 2026-10-06 |
| CVE-2026-81548 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-24 | 2026-10-06 |
| CVE-2026-81549 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 7.7 | — | Ibm / datastage on cloud pak for data | 2026-09-24 | 2026-10-06 |
| CVE-2026-51873 Devika v1.0 is vulnerable to Directory Traversal in the Coder.save_code_to_proje... |
high | 8.8 | — | — | 2026-10-01 | 2026-10-06 |
| CVE-2026-105788 Microsoft UFO is an open-source framework for intelligent automation across devi... |
high | 8.8 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-81552 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-24 | 2026-10-06 |
| CVE-2026-82093 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-24 | 2026-10-06 |
| CVE-2026-82094 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 7.1 | — | Ibm / datastage on cloud pak for data | 2026-09-24 | 2026-10-06 |
| CVE-2026-80379 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-23 | 2026-10-06 |
| CVE-2026-80412 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-23 | 2026-10-06 |
| CVE-2026-80425 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-23 | 2026-10-06 |
| CVE-2026-81208 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow an authenticated user to... |
high | 7.7 | — | Ibm / datastage on cloud pak for data | 2026-09-23 | 2026-10-06 |
| CVE-2026-81536 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 7.7 | — | Ibm / datastage on cloud pak for data | 2026-09-23 | 2026-10-06 |
| CVE-2026-81537 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-23 | 2026-10-06 |
| CVE-2026-81539 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-24 | 2026-10-06 |
| CVE-2026-81545 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-24 | 2026-10-06 |
| CVE-2026-81547 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-24 | 2026-10-06 |
| CVE-2014-125130 CodeArt Google MP3 Audio Player plugin (google-mp3-audio-player) for WordPress t... |
high | 7.5 | — | — | 2026-10-02 | 2026-10-06 |
| CVE-2020-37278 Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability th... |
high | 7.5 | — | — | 2026-10-02 | 2026-10-06 |
| CVE-2026-105123 W (vincent-peugnet/wcms) through 3.18.0 contains a remote code execution vulnera... |
high | 8.8 | — | — | 2026-10-04 | 2026-10-06 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.