October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
23,804
Critical
3,240
High
7,742
Medium
7,383
Low
706
Severity not reported
4,733
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-104435 Zebra zebrad 4.4.0 and zebra-script 6.0.0 fail to enforce a ZIP-244 consensus ru... |
high | 7.4 | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-93875 The JetAppointment plugin for WordPress is vulnerable to Stored Cross-Site Scrip... |
high | 7.2 | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-104637 A weakness has been identified in onetwothreeneth HospitalManagementSystem up to... |
high | 7.3 | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-58567 Dell PowerStore contains an OS Command Injection vulnerability. |
high | 8.8 | — | Dell / powerstoreos | 2026-09-01 | 2026-10-02 |
| CVE-2026-79682 Dell PowerStore contains a Command Injection vulnerability. |
high | 8.8 | — | Dell / powerstoreos | 2026-09-01 | 2026-10-02 |
| CVE-2026-58569 Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sp... |
high | 8.8 | — | Dell / powerstoreos | 2026-09-01 | 2026-10-02 |
| CVE-2026-58572 Dell PowerStore contains a Code Injection vulnerability. |
high | 8.8 | — | Dell / powerstoreos | 2026-09-01 | 2026-10-02 |
| CVE-2026-58571 Dell PowerStore contains an OS Command Injection vulnerability. |
high | 8.8 | — | Dell / powerstoreos | 2026-09-01 | 2026-10-02 |
| CVE-2026-79684 Dell PowerStore contains a Protection Mechanism Failure vulnerability. |
high | 8.8 | — | Dell / powerstoreos | 2026-09-01 | 2026-10-02 |
| CVE-2026-79686 Dell PowerStore contains a Protection Mechanism Failure vulnerability. |
high | 8.8 | — | Dell / powerstoreos | 2026-09-01 | 2026-10-02 |
| CVE-2026-53605 Reachy Mini ISO for Wireless contains the necessary files to build a custom Rasp... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-103473 Deno versions 2.7.0 through 2.9.7 on Windows contain a command injection vulnera... |
high | 8.1 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-103231 A vulnerability was identified in AdithyaYelloju Restaurant-Management-System up... |
high | 7.3 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2023-54403 Yonyou U8 CRM before V16.5 and V18 contains an arbitrary file read vulnerability... |
high | 7.5 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-104467 YesWiki before 4.6.7 contains an authorization bypass vulnerability in ApiServic... |
high | 8.1 | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-103591 DeepWiki-Open through commit d92819a contains an unauthenticated arbitrary file... |
high | 7.5 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-100665 Netty versions from 4.2.11.Final before 4.2.18.Final contain an incomplete hostn... |
high | 7.5 | — | — | 2026-09-26 | 2026-10-02 |
| CVE-2026-100276 In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow ac... |
high | 7.5 | — | Jetbrains / youtrack | 2026-09-30 | 2026-10-02 |
| CVE-2026-88890 OpenPanel through 2.3.0 contains an SQL injection vulnerability in the analytics... |
high | 8.5 | — | — | 2026-09-10 | 2026-10-02 |
| CVE-2026-88891 OpenPanel through 2.3.0 fails to enforce read-only project access level on 26 of... |
high | 8.3 | — | — | 2026-09-10 | 2026-10-02 |
| CVE-2026-88893 OpenPanel through 2.3.0 share lookup procedures fail to validate access controls... |
high | 7.5 | — | — | 2026-09-10 | 2026-10-02 |
| CVE-2026-80443 Improper certificate validation vulnerability in HAVELSAN Inc. |
high | 7.4 | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-104462 YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar nuaget... |
high | 7.5 | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-104464 YesWiki before 4.6.7 contains a server-side request forgery vulnerability that a... |
high | 8.6 | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-104472 YesWiki before 4.6.7 contains a missing authorization vulnerability in the attac... |
high | 7.5 | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-104448 YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the... |
high | 8.1 | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-104456 YesWiki before 4.6.7 contains a second-order SQL injection vulnerability in AclS... |
high | 7.6 | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-104460 YesWiki before 4.6.7 contains a blind SQL injection vulnerability in the {{newte... |
high | 7.5 | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-95380 Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95381 Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 al... |
high | 8.3 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2010-1428 Red Hat JBoss Information Disclosure Vulnerability |
high | 7.5 | Listed | Red Hat / JBoss | 2010-04-28 | 2026-10-02 |
| CVE-2022-27924 Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability |
high | 7.5 | Listed | Synacor / Zimbra Collaboration Suite (ZCS) | 2022-04-21 | 2026-10-02 |
| CVE-2022-30333 RARLAB UnRAR Directory Traversal Vulnerability |
high | 7.5 | Listed | RARLAB / UnRAR | 2022-05-09 | 2026-10-02 |
| CVE-2021-21975 VMware Server Side Request Forgery in vRealize Operations Manager API |
high | 7.5 | Listed | VMware / vRealize Operations Manager API | 2021-03-31 | 2026-10-02 |
| CVE-2026-84233 A flaw was found in rpm. |
high | 7.0 | — | — | 2026-09-01 | 2026-10-02 |
| CVE-2026-104463 YesWiki before 4.6.7 contains a server-side request forgery vulnerability that a... |
high | 7.0 | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-104471 YesWiki before 4.6.7 contains an unrestricted file upload vulnerability that all... |
high | 7.2 | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-104443 YesWiki before 4.6.7 contains an empty-filter scope bypass in the triples delete... |
high | 8.1 | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-104447 YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the... |
high | 7.1 | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-81480 Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Sta... |
high | 7.2 | — | Dell / openmanage server administrator | 2026-09-17 | 2026-10-02 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.