October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
23,804
Critical
3,240
High
7,742
Medium
7,383
Low
706
Severity not reported
4,733
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-81481 Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Im... |
high | 7.5 | — | Dell / openmanage server administrator | 2026-09-17 | 2026-10-02 |
| CVE-2026-84414 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to chang... |
high | 7.8 | — | Ibm / i | 2026-09-29 | 2026-10-02 |
| CVE-2026-84421 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-29 | 2026-10-02 |
| CVE-2026-84422 IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI... |
high | 7.2 | — | Ibm / guardium data protection | 2026-09-29 | 2026-10-02 |
| CVE-2026-95372 Use after free in Chromecast in Google Chrome prior to 154.0.8037.57 allowed a r... |
high | 8.3 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95373 Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-86035 Weblate is a web-based continuous localization platform used to manage software... |
high | 8.5 | — | — | 2026-09-29 | 2026-10-02 |
| CVE-2026-74222 U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_r... |
high | 8.2 | — | — | 2026-09-29 | 2026-10-02 |
| CVE-2026-51570 modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in insert_te... |
high | 8.1 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-103055 AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verificatio... |
high | 7.5 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-103042 LightLLM through 1.2.0 contains a memory exhaustion vulnerability in the NCCL co... |
high | 7.5 | — | — | 2026-09-29 | 2026-10-02 |
| CVE-2026-102913 A security flaw has been discovered in SourceCodester Car Driving School Managem... |
high | 7.3 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-102910 A security flaw has been discovered in SourceCodester Online Reviewer Management... |
high | 7.3 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-102876 SurrealDB before 3.3.0 contains an authorization bypass in HTTP session construc... |
high | 8.1 | — | — | 2026-09-29 | 2026-10-02 |
| CVE-2026-102831 JupyterLab is an extensible environment for interactive and reproducible computi... |
high | 8.1 | — | — | 2026-09-29 | 2026-10-02 |
| CVE-2026-102823 Russh is a Rust SSH client and server library. |
high | 7.5 | — | — | 2026-09-29 | 2026-10-02 |
| CVE-2026-102293 A vulnerability was identified in realjerrytang tacomall 1.0.0. |
high | 7.3 | — | — | 2026-09-29 | 2026-10-02 |
| CVE-2015-3246 Red Hat Libuser Race Condition Vulnerability |
high | 7.4 | Listed | Red Hat / Libuser | 2015-08-11 | 2026-10-02 |
| CVE-2026-47595 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-47589 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-47590 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-47591 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-47592 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-47593 NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mod... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-47594 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-47570 NVIDIA GPU Display Driver for Windows contains a vulnerability in the CUDA drive... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-47571 NVIDIA GPU Display Driver for Windows contains a vulnerability in kernel-mode es... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-47572 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-47573 NVIDIA NVAPI for Windows contains a vulnerability where an attacker could cause... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-47588 NVIDIA GPU Display Driver for Linux contains a vulnerability where an unprivileg... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2019-1579 Palo Alto Networks PAN-OS Remote Code Execution Vulnerability |
high | 8.1 | Listed | Palo Alto Networks / PAN-OS | 2019-07-19 | 2026-10-02 |
| CVE-2023-46805 Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability |
high | 8.2 | Listed | Ivanti / Connect Secure and Policy Secure | 2024-01-12 | 2026-10-01 |
| CVE-2021-27065 Microsoft Exchange Server Remote Code Execution Vulnerability |
high | 7.8 | Listed | Microsoft / Exchange Server | 2021-03-03 | 2026-10-01 |
| CVE-2021-26411 Microsoft Internet Explorer Memory Corruption Vulnerability |
high | 8.8 | Listed | Microsoft / Internet Explorer | 2021-03-11 | 2026-10-01 |
| CVE-2021-26858 Microsoft Exchange Server Remote Code Execution Vulnerability |
high | 7.8 | Listed | Microsoft / Exchange Server | 2021-03-03 | 2026-10-01 |
| CVE-2021-20022 SonicWall Email Security Unrestricted Upload of File Vulnerability |
high | 7.2 | Listed | SonicWall / SonicWall Email Security | 2021-04-09 | 2026-10-01 |
| CVE-2026-97662 An argument injection issue in the diff scan operation in AWS security-agent-mcp... |
high | 8.2 | — | — | 2026-10-01 | 2026-10-01 |
| CVE-2026-79899 Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgeth... |
high | 7.9 | — | — | 2026-10-01 | 2026-10-01 |
| CVE-2026-79896 Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom T... |
high | 7.5 | — | — | 2026-10-01 | 2026-10-01 |
| CVE-2026-14316 The revoked-key error path builds a human-readable failure reason using sprintf(... |
high | 8.1 | — | — | 2026-10-01 | 2026-10-01 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.