October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
23,723
Critical
3,236
High
7,709
Medium
7,360
Low
706
Severity not reported
4,712
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2024-9676 A vulnerability was found in Podman, Buildah, and CRI-O. |
medium | 6.5 | — | Redhat / openshift container platform | 2024-10-15 | 2026-10-30 |
| CVE-2013-1840 A flaw was found in OpenStack Glance. |
medium | 6.5 | — | Openstack / glance | 2013-03-22 | 2026-10-30 |
| CVE-2023-4813 A flaw has been identified in glibc. |
medium | 5.9 | — | Gnu / glibc | 2023-09-12 | 2026-10-30 |
| CVE-2024-11831 A flaw was found in npm-serialize-javascript. |
medium | 5.4 | — | — | 2025-02-10 | 2026-10-30 |
| CVE-2012-5625 OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt... |
medium | 6.5 | — | Openstack / folsom | 2012-12-26 | 2026-10-30 |
| CVE-2013-0266 A flaw was found in the `puppetlabs-cinder` module, as used in PackStack. |
medium | 5.5 | — | Openstack / essex | 2013-03-08 | 2026-10-30 |
| CVE-2013-1815 A flaw was found in PackStack. |
medium | 6.1 | — | Redhat / openstack essex | 2013-04-10 | 2026-10-30 |
| CVE-2011-4346 Cross-site scripting (XSS) vulnerability in the web interface in Red Hat Network... |
medium | 4.6 | — | Redhat / satellite | 2011-12-10 | 2026-10-30 |
| CVE-2012-5571 A flaw was found in OpenStack Keystone. |
medium | 5.4 | — | Openstack / essex | 2012-12-18 | 2026-10-30 |
| CVE-2012-4574 A flaw was found in Pulp, as used in Red Hat CloudForms. |
medium | 5.5 | — | Redhat / cloudforms | 2013-01-04 | 2026-10-30 |
| CVE-2012-3427 A flaw was found in JBoss Enterprise Application Platform (EAP) and EC2 Amazon M... |
medium | 5.5 | — | Redhat / jboss enterprise application platform | 2014-02-02 | 2026-10-30 |
| CVE-2012-0059 A flaw was found in Spacewalk-backend. |
medium | 4.9 | — | Redhat / network proxy | 2014-02-05 | 2026-10-30 |
| CVE-2011-1594 A flaw was found in Spacewalk, as used in Red Hat Network Satellite. |
medium | 6.5 | — | Redhat / network satellite | 2014-02-05 | 2026-10-30 |
| CVE-2011-2920 A flaw was found in Spacewalk and Red Hat Network Satellite. |
medium | 5.5 | — | Redhat / network satellite | 2014-02-05 | 2026-10-30 |
| CVE-2011-2927 A flaw was found in Spacewalk and Red Hat Network Satellite. |
medium | 5.4 | — | Redhat / network satellite | 2014-02-05 | 2026-10-30 |
| CVE-2011-3344 A flaw was found in Spacewalk. |
medium | 5.4 | — | Redhat / network satellite | 2014-02-05 | 2026-10-30 |
| CVE-2009-4139 A flaw was found in Spacewalk Java site packages. |
medium | 6.8 | — | Redhat / network satellite server | 2011-07-27 | 2026-10-30 |
| CVE-2026-119414 Bitwarden Server before 2026.10.1 on Entity Framework backends contains an autho... |
medium | 4.3 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119423 OPNsense core before 26.7.8 contains a log injection vulnerability that allows u... |
medium | 5.3 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119424 OPNsense core before 26.7.8 contains a configuration line injection vulnerabilit... |
medium | 6.8 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119427 phpMyAdmin through 5.2.3 contains an sql injection vulnerability in Designer sav... |
medium | 4.2 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119429 phpMyAdmin through 5.2.3 contains a missing re-authentication vulnerability that... |
medium | 4.3 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119551 Jellyfin through 12.4 contains an authorization bypass vulnerability in Suggesti... |
medium | 6.5 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119554 Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, an... |
medium | 5.9 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119555 Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 th... |
medium | 4.3 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119561 phpMyAdmin through 5.2.3 contains an authentication bypass vulnerability in Cust... |
medium | 6.8 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119562 phpMyAdmin through 5.2.3 contains an sql injection vulnerability that allows aut... |
medium | 4.2 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119563 phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability th... |
medium | 5.4 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119566 Prometheus through 3.15.1 contains a credential leak vulnerability that allows a... |
medium | 4.8 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119600 tcpflow through 1.6.1 contains an out-of-bounds read vulnerability that allows u... |
medium | 4.8 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119601 AFFLIB through 3.7.22 contains a heap out-of-bounds write vulnerability in af_ge... |
medium | 6.1 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2015-20130 Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site... |
medium | 6.1 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119720 Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds read vu... |
medium | 5.5 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119764 Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerabil... |
medium | 6.8 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119416 CakePHP through 5.4.3 contains an improper cookie domain validation vulnerabilit... |
medium | 4.8 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119146 ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in... |
medium | 5.6 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119147 ProFTPD before 1.3.9e and 1.3.10rc5 contains an authorization bypass in the mod_... |
medium | 4.3 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119364 ProFTPD through 1.3.9e and 1.3.10rc1 through 1.3.10rc4 contains a link-following... |
medium | 5.3 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119371 SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attac... |
medium | 5.5 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119372 SQLite before 3.54.0 built with FTS3/FTS4 and SQLITE_ENABLE_FTS3_PARENTHESIS con... |
medium | 5.5 | — | — | 2026-10-30 | 2026-10-30 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.