October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
23,702
Critical
3,236
High
7,701
Medium
7,358
Low
705
Severity not reported
4,702
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1426), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2023-25166 formula is a math and string formula parser. |
medium | 6.5 | — | Hapi / formula | 2023-02-08 | 2026-10-28 |
| CVE-2023-21435 Exposure of Sensitive Information vulnerability in Fingerprint TA prior to SMR F... |
medium | 5.5 | — | Samsung / android | 2023-02-09 | 2026-10-28 |
| CVE-2023-0177 The Social Like Box and Page by WpDevArt WordPress plugin before 0.8.41 does not... |
medium | 5.4 | — | Wpdevart / social like box and page | 2023-02-13 | 2026-10-28 |
| CVE-2023-0025 SAP Solution Manager (BSP Application) - version 720, allows an authenticated at... |
medium | 5.4 | — | Sap / solution manager | 2023-02-14 | 2026-10-28 |
| CVE-2023-24521 Due to insufficient input sanitization, SAP NetWeaver AS ABAP (BSP Framework) -... |
medium | 6.1 | — | Sap / netweaver as abap business server pages | 2023-02-14 | 2026-10-28 |
| CVE-2023-22231 Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected... |
medium | 5.5 | — | Adobe / bridge | 2023-02-17 | 2026-10-28 |
| CVE-2023-0902 A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. |
medium | 5.4 | — | Simple Food Ordering System Project / simple food ordering system | 2023-02-18 | 2026-10-28 |
| CVE-2023-20627 In pqframework, there is a possible out of bounds write due to a missing bounds... |
medium | 6.7 | — | Google / android | 2023-03-07 | 2026-10-28 |
| CVE-2023-0749 The Ocean Extra WordPress plugin before 2.1.3 does not ensure that the template... |
medium | 6.5 | — | Oceanwp / ocean extra | 2023-03-13 | 2026-10-28 |
| CVE-2023-27270 SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701,... |
medium | 6.5 | — | Sap / netweaver application server abap | 2023-03-14 | 2026-10-28 |
| CVE-2023-23815 Auth. |
medium | 5.4 | — | Multi-column Tag Map Project / multi-column tag map | 2023-04-06 | 2026-10-28 |
| CVE-2023-2462 Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63... |
medium | 4.3 | — | Google / chrome | 2023-05-03 | 2026-10-28 |
| CVE-2023-2468 Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0... |
medium | 4.3 | — | Google / chrome | 2023-05-03 | 2026-10-28 |
| CVE-2023-30741 Due to insufficient input validation, SAP BusinessObjects Business Intelligence... |
medium | 6.1 | — | Sap / businessobjects business intelligence | 2023-05-09 | 2026-10-28 |
| CVE-2023-30742 SAP CRM (WebClient UI) - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4... |
medium | 6.1 | — | Sap / customer relationship management s4fnd | 2023-05-09 | 2026-10-28 |
| CVE-2023-32070 XWiki Platform is a generic wiki platform. |
medium | 6.1 | — | Xwiki / rendering | 2023-05-10 | 2026-10-28 |
| CVE-2023-32979 Jenkins Email Extension Plugin does not perform a permission check in a method i... |
medium | 4.3 | — | Jenkins / email extension | 2023-05-16 | 2026-10-28 |
| CVE-2023-31101 Insecure Default Initialization of Resource Vulnerability in Apache Software Fou... |
medium | 6.5 | — | Apache / inlong | 2023-05-22 | 2026-10-28 |
| CVE-2023-33181 Xibo is a content management system (CMS). |
medium | 5.3 | — | Xibosignage / xibo | 2023-05-30 | 2026-10-28 |
| CVE-2023-3055 The Page Builder by AZEXO plugin for WordPress is vulnerable to Cross-Site Reque... |
medium | 4.3 | — | Azexo / page builder with image map by azexo | 2023-06-03 | 2026-10-28 |
| CVE-2023-2572 The Survey Maker WordPress plugin before 3.4.7 does not escape some parameters b... |
medium | 6.1 | — | Ays-pro / survey maker | 2023-06-05 | 2026-10-28 |
| CVE-2023-2085 The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of f... |
medium | 4.3 | — | Wpdeveloper / essential blocks | 2023-06-09 | 2026-10-28 |
| CVE-2023-53685 In the Linux kernel, the following vulnerability has been resolved:
tun: Fix me... |
medium | 5.5 | — | Linux / linux kernel | 2025-10-07 | 2026-10-28 |
| CVE-2023-53686 In the Linux kernel, the following vulnerability has been resolved:
net/handsha... |
medium | 5.5 | — | Linux / linux kernel | 2025-10-07 | 2026-10-28 |
| CVE-2023-53687 In the Linux kernel, the following vulnerability has been resolved:
tty: serial... |
medium | 5.5 | — | Linux / linux kernel | 2025-10-07 | 2026-10-28 |
| CVE-2023-37749 Incorrect access control in the REST API endpoint of HubSpot v1.29441 allows una... |
medium | 5.3 | — | — | 2025-10-27 | 2026-10-28 |
| CVE-2023-7331 A vulnerability was detected in PKrystian Full-Stack-Bank up to bf73a0179e3ff07c... |
medium | 4.7 | — | — | 2025-12-31 | 2026-10-28 |
| CVE-2023-7339 Stack-based buffer overflow vulnerability in Softing Industrial Automation GmbH... |
medium | 6.5 | — | — | 2026-03-27 | 2026-10-28 |
| CVE-2023-7340 Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers... |
medium | 4.3 | — | Wazuh / wazuh | 2026-03-27 | 2026-10-28 |
| CVE-2023-5872 In Wago Smart Designer in versions up to 2.33.1 a low privileged remote attacker... |
medium | 4.3 | — | — | 2026-04-16 | 2026-10-28 |
| CVE-2023-54349 AmazCart CMS 3.4 contains a reflected cross-site scripting vulnerability that al... |
medium | 6.1 | — | — | 2026-05-05 | 2026-10-28 |
| CVE-2023-42343 A Cross Site Scripting vulnerability in Alkacon OpenCms before 10.5.1 exists via... |
medium | 6.1 | — | — | 2026-05-08 | 2026-10-28 |
| CVE-2023-42345 A Cross Site Scripting vulnerability in Alkacon OpenCms before 16 exists via upd... |
medium | 6.1 | — | — | 2026-05-08 | 2026-10-28 |
| CVE-2023-47268 In libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a craft... |
medium | 5.3 | — | Prusa3d / prusaslicer | 2026-05-08 | 2026-10-28 |
| CVE-2023-30059 An insecure direct object reference in MK-Auth 23.01K4.9 allows attackers to acc... |
medium | 5.4 | — | — | 2026-05-12 | 2026-10-28 |
| CVE-2026-98098 In the Linux kernel, the following vulnerability has been resolved:
tipc: fix N... |
medium | 5.5 | — | Linux / linux kernel | 2026-09-25 | 2026-10-28 |
| CVE-2026-98097 In the Linux kernel, the following vulnerability has been resolved:
tipc: Dont... |
medium | 5.3 | — | Linux / linux kernel | 2026-09-25 | 2026-10-28 |
| CVE-2026-113943 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / macos | 2026-10-26 | 2026-10-28 |
| CVE-2026-101733 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 6.5 | — | Oracle / mysql cluster | 2026-10-20 | 2026-10-28 |
| CVE-2026-101743 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 6.5 | — | Oracle / mysql cluster | 2026-10-20 | 2026-10-28 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.