October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,423
Critical
3,147
High
7,191
Medium
7,024
Low
633
Severity not reported
4,428
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (322), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-76489 Multiple Cisco products are affected by a vulnerability in the memory management... |
medium | 5.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-76487 A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco U... |
medium | 5.3 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-76435 A vulnerability in Cisco Expressway Series could allow an unauthenticated, remot... |
medium | 5.3 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-76445 Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection... |
medium | 5.3 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-20179 Multiple Cisco products are affected by a vulnerability in the Snort 3 Generic R... |
medium | 5.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-20197 Multiple Cisco products are affected by a vulnerability in the Snort 3 Teredo De... |
medium | 5.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-20221 Multiple Cisco products are affected by a vulnerability in the generic routing e... |
medium | 5.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-20011 Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME... |
medium | 5.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-20019 Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow D... |
medium | 5.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-106491 Backstage is an open framework for building developer portals. |
medium | 6.4 | — | Linuxfoundation / backstage\/plugin-proxy-backend | 2026-10-06 | 2026-10-22 |
| CVE-2026-106492 Backstage is an open framework for building developer portals. |
medium | 6.5 | — | Linuxfoundation / backstage\/backend-defaults | 2026-10-06 | 2026-10-22 |
| CVE-2026-106493 Backstage is an open framework for building developer portals. |
medium | 4.1 | — | Linuxfoundation / backstage | 2026-10-06 | 2026-10-22 |
| CVE-2026-106494 Backstage is an open framework for building developer portals. |
medium | 4.9 | — | Linuxfoundation / backstage\/backend defaults | 2026-10-06 | 2026-10-22 |
| CVE-2026-70170 Untrusted pointer dereference in Windows Kernel allows an authorized attacker to... |
medium | 6.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-22 |
| CVE-2026-106564 ImageMagick is free and open-source software used for editing and manipulating d... |
medium | 5.3 | — | Imagemagick / imagemagick | 2026-10-07 | 2026-10-22 |
| CVE-2026-70199 Exposure of sensitive system information to an unauthorized control sphere in Wi... |
medium | 5.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-22 |
| CVE-2026-70232 Exposure of sensitive system information to an unauthorized control sphere in Wi... |
medium | 5.5 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-22 |
| CVE-2026-84284 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11... |
medium | 5.3 | — | Gitlab / gitlab | 2026-10-13 | 2026-10-22 |
| CVE-2026-115326 QloApps through 1.7.0 contains an insecure direct object reference vulnerability... |
medium | 5.4 | — | — | 2026-10-22 | 2026-10-22 |
| CVE-2026-114176 Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webin... |
medium | 4.3 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-112868 Authorization Bypass Through User-Controlled Key vulnerability in H5P H5P h5p al... |
medium | 4.3 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2017-20290 Discourse 1.9.0.beta2 before 1.9.0.beta13 contains a reflected cross-site script... |
medium | 6.1 | — | — | 2026-10-22 | 2026-10-22 |
| CVE-2026-86332 A flaw was found in odh-dashboard in Red Hat OpenShift AI. |
medium | 6.5 | — | — | 2026-09-07 | 2026-10-22 |
| CVE-2026-112293 BoxyHQ Enterprise SaaS Starter Kit through 1.6.0 contains a missing authorizatio... |
medium | 5.4 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-112329 The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control v... |
medium | 4.3 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-112268 sglang-router (sgl-model-gateway) through 0.3.2 contains an authorization bypass... |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-112273 libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::com... |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-112278 rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in proce... |
medium | 6.5 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-112283 VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vuln... |
medium | 5.5 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-112091 A flaw has been found in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42... |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-112100 A vulnerability was determined in DeepPavlov up to 1.7.0. |
medium | 5.5 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-112108 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-112049 Vita3K before build 4187 contains a path traversal (zip slip) vulnerability in i... |
medium | 5.5 | — | — | 2026-10-18 | 2026-10-22 |
| CVE-2026-112054 Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerabil... |
medium | 5.5 | — | — | 2026-10-18 | 2026-10-22 |
| CVE-2026-112059 libLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the po... |
medium | 6.1 | — | — | 2026-10-18 | 2026-10-22 |
| CVE-2026-112073 A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd... |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-112077 A vulnerability was detected in radareorg radare2 6.2.0/6.2.2. |
medium | 5.6 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-112081 A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-112087 A weakness has been identified in itsourcecode Online Cake Ordering System 1.0. |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-112020 LodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lod... |
medium | 6.1 | — | — | 2026-10-18 | 2026-10-22 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.