October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
23,712
Critical
3,235
High
7,708
Medium
7,359
Low
705
Severity not reported
4,705
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-63936 In the Linux kernel, the following vulnerability has been resolved:
iio: adc: m... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63948 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-101761 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 5.9 | — | Oracle / mysql cluster | 2026-10-20 | 2026-10-30 |
| CVE-2026-60874 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
medium | 4.2 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-30 |
| CVE-2026-87353 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
medium | 4.5 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-30 |
| CVE-2026-87355 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
medium | 4.4 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-30 |
| CVE-2026-101760 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 4.9 | — | Oracle / mysql cluster | 2026-10-20 | 2026-10-30 |
| CVE-2026-101756 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 4.9 | — | Oracle / mysql cluster | 2026-10-20 | 2026-10-30 |
| CVE-2026-114392 Trudesk through 1.2.11 contains an authorization bypass vulnerability that allow... |
medium | 5.3 | — | Trudesk Project / trudesk | 2026-10-21 | 2026-10-30 |
| CVE-2026-114393 Trudesk through 1.2.11 contains an authorization bypass vulnerability that allow... |
medium | 4.3 | — | Trudesk Project / trudesk | 2026-10-21 | 2026-10-30 |
| CVE-2026-114394 Trudesk through 1.2.11 contains an authorization bypass vulnerability that allow... |
medium | 4.3 | — | Trudesk Project / trudesk | 2026-10-21 | 2026-10-30 |
| CVE-2026-114395 Trudesk through 1.2.11 contains an authorization bypass vulnerability in apiMess... |
medium | 4.3 | — | Trudesk Project / trudesk | 2026-10-21 | 2026-10-30 |
| CVE-2026-114402 Trudesk through 1.2.11 contains a path traversal and authorization bypass vulner... |
medium | 4.3 | — | Trudesk Project / trudesk | 2026-10-21 | 2026-10-30 |
| CVE-2026-101755 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 5.3 | — | Oracle / mysql cluster | 2026-10-20 | 2026-10-30 |
| CVE-2026-88078 Improper verification of cryptographic signature in Microsoft Edge (Chromium-bas... |
medium | 4.3 | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-20942 Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium... |
medium | 4.3 | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-119576 ArcadeDB from 21.12.1 before 26.10.2 contains an authorization bypass vulnerabil... |
medium | 4.3 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119575 ArcadeDB from 26.8.1 before 26.10.2 contains a server-side request forgery vulne... |
medium | 6.5 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-112556 A race condition was addressed with additional validation. |
medium | 4.8 | — | Apple / macos | 2026-10-26 | 2026-10-30 |
| CVE-2026-83719 Buffer over-read in Servicing Stack Updates allows an authorized attacker to dis... |
medium | 5.5 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-30 |
| CVE-2026-107305 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
medium | 5.4 | — | Adobe / experience manager | 2026-10-13 | 2026-10-30 |
| CVE-2026-104308 IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacke... |
medium | 4.3 | — | Langflow / langflow | 2026-10-29 | 2026-10-30 |
| CVE-2026-104309 IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacke... |
medium | 6.5 | — | Langflow / langflow | 2026-10-29 | 2026-10-30 |
| CVE-2026-104312 IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to p... |
medium | 6.8 | — | Langflow / langflow | 2026-10-29 | 2026-10-30 |
| CVE-2026-104314 IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with... |
medium | 6.5 | — | Langflow / langflow | 2026-10-29 | 2026-10-30 |
| CVE-2026-104315 IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forge... |
medium | 4.3 | — | Langflow / langflow | 2026-10-29 | 2026-10-30 |
| CVE-2026-104316 IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to c... |
medium | 6.5 | — | Langflow / langflow | 2026-10-29 | 2026-10-30 |
| CVE-2026-104331 IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forge... |
medium | 5.4 | — | Langflow / langflow | 2026-10-29 | 2026-10-30 |
| CVE-2026-110190 IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated user to trave... |
medium | 6.5 | — | Langflow / langflow | 2026-10-29 | 2026-10-30 |
| CVE-2026-110192 IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote authenticated attacke... |
medium | 6.5 | — | Langflow / langflow | 2026-10-29 | 2026-10-30 |
| CVE-2026-110200 IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacke... |
medium | 6.5 | — | Langflow / langflow | 2026-10-29 | 2026-10-30 |
| CVE-2026-110244 IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacke... |
medium | 6.5 | — | Langflow / langflow | 2026-10-29 | 2026-10-30 |
| CVE-2026-107682 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) v... |
medium | 5.4 | — | Adobe / experience manager | 2026-10-13 | 2026-10-30 |
| CVE-2026-77819 IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacke... |
medium | 6.5 | — | Langflow / langflow | 2026-10-29 | 2026-10-30 |
| CVE-2026-90991 IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacke... |
medium | 6.5 | — | Langflow / langflow | 2026-10-29 | 2026-10-30 |
| CVE-2026-64345 In the Linux kernel, the following vulnerability has been resolved:
usb: gadget... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-25 | 2026-10-30 |
| CVE-2026-64163 In the Linux kernel, the following vulnerability has been resolved:
test_kprobe... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-64190 In the Linux kernel, the following vulnerability has been resolved:
net: team:... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-20 | 2026-10-30 |
| CVE-2026-64213 In the Linux kernel, the following vulnerability has been resolved:
hwmon: (lm9... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-24 | 2026-10-30 |
| CVE-2026-64144 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.