October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,105
Critical
3,260
High
7,834
Medium
7,482
Low
725
Severity not reported
4,804
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-97341 The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to S... |
high | 7.2 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-18443 The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin... |
high | 8.8 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-75028 The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin... |
high | 7.5 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-93889 The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored... |
high | 7.2 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-94505 The Nelio Content – Editorial Calendar & Social Media Auto-Posting plugin for Wo... |
high | 8.1 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-96267 The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable... |
high | 7.5 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-97660 The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to St... |
high | 7.2 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-105158 A vulnerability was detected in RainyGao DocSys up to 2.02.85. |
high | 7.3 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-105167 A vulnerability was determined in kishor-23 food-waste-management-system 411989e... |
high | 7.3 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-105169 A security flaw has been discovered in kishor-23 food-waste-management-system 41... |
high | 7.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105172 A vulnerability was detected in itsourcecode Online Admission System 1.0. |
high | 7.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105175 A vulnerability was found in SourceCodester Drug Recommendation System 1.0. |
high | 7.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105183 A weakness has been identified in itsourcecode Online Admission System 1.0. |
high | 7.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105184 A security vulnerability has been detected in itsourcecode Online Admission Syst... |
high | 7.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105185 A vulnerability was detected in itsourcecode Online Admission System 1.0. |
high | 7.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105229 A weakness has been identified in kishor-23 food-waste-management-system 411989e... |
high | 7.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105230 A security vulnerability has been detected in kishor-23 food-waste-management-sy... |
high | 7.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105231 A vulnerability was detected in kishor-23 food-waste-management-system 411989e3e... |
high | 7.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105238 A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. |
high | 7.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105246 A vulnerability was found in SourceCodester Online Reviewer Management System 1.... |
high | 7.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105247 A vulnerability was determined in SourceCodester Online Reviewer Management Syst... |
high | 7.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105253 A vulnerability was determined in itsourcecode Online Admission System Project 1... |
high | 7.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105382 A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6... |
high | 7.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105384 A vulnerability was found in UNION HospitalManagementSystem up to 9ef91ed6007314... |
high | 7.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105471 A security flaw has been discovered in girishsaraf Online-Appointment-Booking-Sy... |
high | 7.3 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-105704 A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. |
high | 7.3 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-105776 A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-We... |
high | 7.3 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-105807 A vulnerability was found in SourceCodester Simple Student Information System 1.... |
high | 7.3 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-39718 Cross-Site Request Forgery (CSRF) vulnerability in Webriti Wallstreet wallstreet... |
high | 8.8 | — | — | 2026-10-02 | 2026-10-06 |
| CVE-2026-103065 Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirk... |
high | 8.2 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-103342 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-96451 Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Membe... |
high | 8.8 | — | — | 2026-10-03 | 2026-10-06 |
| CVE-2026-103062 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-103344 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-103354 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-97276 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-97307 Insertion of Sensitive Information Into Sent Data vulnerability in StylemixTheme... |
high | 7.5 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-104389 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti... |
high | 8.5 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-104407 Cross-Site Request Forgery (CSRF) vulnerability in Blubrry Podcasting PowerPress... |
high | 7.1 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-104408 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti... |
high | 7.6 | — | — | 2026-10-05 | 2026-10-06 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.