October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
23,712
Critical
3,235
High
7,708
Medium
7,359
Low
705
Severity not reported
4,705
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-76295 In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Spl... |
medium | 4.3 | — | Splunk / splunk | 2026-10-21 | 2026-10-30 |
| CVE-2026-119272 Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed... |
medium | 4.3 | — | Google / chrome | 2026-10-30 | 2026-10-30 |
| CVE-2026-76024 Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-30 | 2026-10-30 |
| CVE-2026-76296 In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user... |
medium | 4.3 | — | Splunk / splunk | 2026-10-21 | 2026-10-30 |
| CVE-2026-76027 Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.79 allowe... |
medium | 4.3 | — | Google / chrome | 2026-10-30 | 2026-10-30 |
| CVE-2026-76297 In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unau... |
medium | 5.4 | — | Splunk / splunk | 2026-10-21 | 2026-10-30 |
| CVE-2026-101412 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
medium | 5.8 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-30 |
| CVE-2026-101780 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 6.5 | — | Oracle / mysql cluster | 2026-10-20 | 2026-10-30 |
| CVE-2026-119647 RuoYi-Vue-Plus through 6.0.0 contains an authorization bypass vulnerability in S... |
medium | 4.3 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-115918 vLLM is an inference and serving engine for large language models. |
medium | 6.5 | — | Vllm / vllm | 2026-10-26 | 2026-10-30 |
| CVE-2026-116678 Vaultwarden is a Bitwarden-compatible server written in Rust. |
medium | 5.8 | — | — | 2026-10-27 | 2026-10-30 |
| CVE-2026-115911 vLLM is an inference and serving engine for large language models. |
medium | 6.5 | — | Vllm / vllm | 2026-10-26 | 2026-10-30 |
| CVE-2026-115914 vLLM is an inference and serving engine for large language models. |
medium | 6.5 | — | Vllm / vllm | 2026-10-26 | 2026-10-30 |
| CVE-2026-104949 WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by... |
medium | 5.4 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-101778 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 6.5 | — | Oracle / mysql cluster | 2026-10-20 | 2026-10-30 |
| CVE-2026-101777 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 5.5 | — | Oracle / mysql cluster | 2026-10-20 | 2026-10-30 |
| CVE-2026-101776 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 4.9 | — | Oracle / mysql cluster | 2026-10-20 | 2026-10-30 |
| CVE-2026-115712 Incorrect Authorization (CWE-863) in Elastic Cloud Enterprise (ECE) can lead to... |
medium | 4.3 | — | Elastic / elastic cloud enterprise | 2026-10-29 | 2026-10-30 |
| CVE-2026-114717 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail hea... |
medium | 5.8 | — | Roundcube / webmail | 2026-10-22 | 2026-10-30 |
| CVE-2026-101774 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 6.5 | — | Oracle / mysql cluster | 2026-10-20 | 2026-10-30 |
| CVE-2026-114718 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-si... |
medium | 6.1 | — | Roundcube / webmail | 2026-10-22 | 2026-10-30 |
| CVE-2026-63873 In the Linux kernel, the following vulnerability has been resolved:
accel/amdxd... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-101762 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 5.3 | — | Oracle / mysql cluster | 2026-10-20 | 2026-10-30 |
| CVE-2026-63876 In the Linux kernel, the following vulnerability has been resolved:
serial: zs:... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63877 In the Linux kernel, the following vulnerability has been resolved:
serial: dz:... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63878 In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu:... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63880 In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu:... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63897 In the Linux kernel, the following vulnerability has been resolved:
USB: serial... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63900 In the Linux kernel, the following vulnerability has been resolved:
USB: serial... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63959 In the Linux kernel, the following vulnerability has been resolved:
usb: typec:... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63953 In the Linux kernel, the following vulnerability has been resolved:
mm/migrate_... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63958 In the Linux kernel, the following vulnerability has been resolved:
usb: typec:... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63960 In the Linux kernel, the following vulnerability has been resolved:
usb: typec:... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63961 In the Linux kernel, the following vulnerability has been resolved:
usb: typec:... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63908 In the Linux kernel, the following vulnerability has been resolved:
Input: atme... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63929 In the Linux kernel, the following vulnerability has been resolved:
iio: buffer... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63931 In the Linux kernel, the following vulnerability has been resolved:
iio: chemic... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63932 In the Linux kernel, the following vulnerability has been resolved:
iio: chemic... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63933 In the Linux kernel, the following vulnerability has been resolved:
iio: gyro:... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63935 In the Linux kernel, the following vulnerability has been resolved:
iio: adc: n... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.