October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
23,651
Critical
3,234
High
7,687
Medium
7,337
Low
703
Severity not reported
4,690
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1426), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2024-58370 SurrealDB versions before 1.1.0 fail to enforce recursion depth limits when pars... |
medium | 6.5 | — | Surrealdb / surrealdb | 2026-07-18 | 2026-10-27 |
| CVE-2026-64236 In the Linux kernel, the following vulnerability has been resolved:
i2c: davinc... |
medium | 5.5 | — | Linux / linux kernel | 2026-07-24 | 2026-10-27 |
| CVE-2024-10302 The user self-signup flow in multiple WSO2 products fails to adequately validate... |
medium | 5.8 | — | Wso2 / api control plane | 2026-08-06 | 2026-10-27 |
| CVE-2024-8995 Unused authorization codes issued to deleted users are not being properly invali... |
medium | 4.9 | — | Wso2 / api control plane | 2026-08-06 | 2026-10-27 |
| CVE-2024-6541 The Class Mediator fails to correctly validate or sanitize `messageContext` prop... |
medium | 6.8 | — | — | 2026-08-06 | 2026-10-27 |
| CVE-2024-14042 A vulnerability was found in Open5GS up to 2.7.1. |
medium | 6.3 | — | — | 2026-08-11 | 2026-10-27 |
| CVE-2026-60809 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
medium | 4.2 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-98142 In the Linux kernel, the following vulnerability has been resolved:
drm/cirrus-... |
medium | 5.5 | — | Linux / linux kernel | 2026-09-25 | 2026-10-27 |
| CVE-2026-60745 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
medium | 4.4 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-60743 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
medium | 6.5 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-60500 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
medium | 5.8 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-98147 In the Linux kernel, the following vulnerability has been resolved:
printk: Don... |
medium | 5.5 | — | Linux / linux kernel | 2026-09-25 | 2026-10-27 |
| CVE-2026-91505 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
medium | 6.0 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-87349 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
medium | 6.5 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-83427 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
medium | 6.6 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-83372 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
medium | 5.4 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-98148 In the Linux kernel, the following vulnerability has been resolved:
drm/gud: va... |
medium | 5.5 | — | Linux / linux kernel | 2026-09-25 | 2026-10-27 |
| CVE-2026-70869 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
medium | 4.7 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-60968 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
medium | 6.0 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-60885 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
medium | 6.8 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-60882 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
medium | 5.3 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-60878 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
medium | 4.4 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-60869 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
medium | 6.8 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-60839 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
medium | 5.5 | — | Oracle / peoplesoft enterprise peopletools | 2026-10-20 | 2026-10-27 |
| CVE-2026-103576 Url redirection to untrusted site ('open redirect') in Active Directory Federati... |
medium | 6.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-27 |
| CVE-2026-87698 Out-of-bounds read in Windows Remote Access Service Infrastructure allows an aut... |
medium | 5.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-27 |
| CVE-2024-38564 In the Linux kernel, the following vulnerability has been resolved:
bpf: Add BP... |
medium | 5.5 | — | Linux / linux kernel | 2024-06-19 | 2026-10-27 |
| CVE-2026-116575 Mem0 provides persistent memory infrastructure for AI agents and applications. |
medium | 6.3 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116730 Furnace through 0.6.8.3 contains an out-of-bounds heap read vulnerability in Div... |
medium | 5.5 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116731 Furnace through 0.6.8.3 contains an out-of-bounds write vulnerability in DivEngi... |
medium | 6.1 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116735 libpff through 20260926 contains an off-by-one bounds check in libpff_table_read... |
medium | 6.1 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116739 VMime through 0.9.2 contains an information disclosure vulnerability in the uuEn... |
medium | 4.3 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116742 HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability i... |
medium | 4.4 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116743 libyal libmsiecf through 20260525 contains a double free vulnerability in libmsi... |
medium | 5.5 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116841 DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in... |
medium | 5.5 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-117530 In JetBrains Junie CLI before 26.8.17 command execution was possible due to inco... |
medium | 6.7 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-115408 In `github.com/eclipse-keypont/crypto11/v2` versions `>= 2.0.0-rc3, <= 2.0.0-rc8... |
medium | 5.5 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-117565 Artalk before 2.10.1 contains an unauthenticated server-side request forgery vul... |
medium | 5.3 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-116579 Autobahn Python is a WebSocket and WAMP implementation for Python that supports... |
medium | 5.9 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116801 Parse Server before 8.6.105 and 9.0.0 before 9.10.5-alpha.6 does not validate th... |
medium | 4.3 | — | — | 2026-10-27 | 2026-10-27 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.