October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
23,827
Critical
3,241
High
7,745
Medium
7,398
Low
707
Severity not reported
4,736
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-97454 In the Linux kernel, the following vulnerability has been resolved:
ACPICA: add... |
high | 7.7 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97455 In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Fix... |
high | 8.4 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97444 In the Linux kernel, the following vulnerability has been resolved:
ACPICA: add... |
high | 7.7 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97445 In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Enh... |
high | 7.7 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97448 In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Add... |
high | 7.7 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97450 In the Linux kernel, the following vulnerability has been resolved:
ACPICA: val... |
high | 8.4 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97451 In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Fix... |
high | 8.4 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97452 In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Pre... |
high | 8.4 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97437 In the Linux kernel, the following vulnerability has been resolved:
ntfs3: fix... |
high | 7.1 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97438 In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: v... |
high | 7.1 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97442 In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11... |
high | 8.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97421 In the Linux kernel, the following vulnerability has been resolved:
RDMA/umem:... |
high | 7.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97429 In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd:... |
high | 7.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97415 In the Linux kernel, the following vulnerability has been resolved:
btrfs: tree... |
high | 7.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97417 In the Linux kernel, the following vulnerability has been resolved:
netfilter:... |
high | 7.5 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93826 In the Linux kernel, the following vulnerability has been resolved:
HID: hidpp:... |
high | 7.5 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93830 In the Linux kernel, the following vulnerability has been resolved:
net: stmmac... |
high | 7.5 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93813 In the Linux kernel, the following vulnerability has been resolved:
btrfs: tree... |
high | 7.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93816 In the Linux kernel, the following vulnerability has been resolved:
f2fs: valid... |
high | 7.1 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93806 In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80... |
high | 8.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93810 In the Linux kernel, the following vulnerability has been resolved:
cachefiles:... |
high | 7.0 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93798 In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix... |
high | 7.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93799 In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwi... |
high | 8.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93787 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
high | 8.1 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93287 In the Linux kernel, the following vulnerability has been resolved:
i2c: smbus:... |
high | 7.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93288 In the Linux kernel, the following vulnerability has been resolved:
netfilter:... |
high | 7.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93782 In the Linux kernel, the following vulnerability has been resolved:
vhost-scsi:... |
high | 7.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-90444 A file-transfer interface that requires valid credentials accepts attacker-contr... |
high | 8.8 | — | — | 2026-09-11 | 2026-10-02 |
| CVE-2026-103552 Stack Overflow vulnerability in Apache Directory LDAP API. |
high | 7.3 | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-90456 An example environment-configuration file for a bundled inventory-management com... |
high | 8.1 | — | — | 2026-09-11 | 2026-10-02 |
| CVE-2026-51916 TransformerOptimus SuperAGI v0.0.14 contains an incorrect access control vulnera... |
high | 7.5 | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-104444 YesWiki before 4.6.7 contains an authorization bypass vulnerability in the comme... |
high | 7.1 | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-100661 Netty's HTTP/3 codec (io.netty:netty-codec-http3) versions 4.2.0.Final through 4... |
high | 7.5 | — | — | 2026-09-26 | 2026-10-02 |
| CVE-2026-47360 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apac... |
high | 7.5 | — | Apache / http server | 2026-10-01 | 2026-10-02 |
| CVE-2026-56153 Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite. |
high | 7.5 | — | Apache / http server | 2026-10-01 | 2026-10-02 |
| CVE-2026-100256 In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script cons... |
high | 7.8 | — | Jetbrains / intellij idea | 2026-09-30 | 2026-10-02 |
| CVE-2026-100262 In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users wi... |
high | 7.1 | — | Jetbrains / youtrack | 2026-09-30 | 2026-10-02 |
| CVE-2026-93367 The Visitors Traffic Real Time Statistics Pro plugin for WordPress is vulnerable... |
high | 7.2 | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-92820 The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary f... |
high | 8.1 | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-67989 crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a pol... |
high | 7.5 | — | — | 2026-10-02 | 2026-10-02 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.