October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
23,341
Critical
3,226
High
7,610
Medium
7,230
Low
656
Severity not reported
4,619
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1426), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-101802 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101803 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101784 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 4.9 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101787 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 4.9 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101788 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 5.9 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101789 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101792 Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product... |
medium | 5.9 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101782 Vulnerability in the Oracle Applications Manager product of Oracle E-Business Su... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101764 Vulnerability in the Oracle Communications Billing and Revenue Management produc... |
medium | 5.5 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101766 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 4.4 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101741 Vulnerability in the Oracle Agile Engineering Data Management product of Oracle... |
medium | 5.3 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101730 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 4.9 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101734 Vulnerability in the Oracle Agile Engineering Data Management product of Oracle... |
medium | 4.3 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101737 Vulnerability in Oracle Java SE (component: Compiler). |
medium | 5.9 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101722 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 4.3 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101724 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 4.9 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101725 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101726 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101727 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 4.9 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101728 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101729 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 4.9 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101706 Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101713 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
medium | 5.4 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101714 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
medium | 6.1 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101715 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101717 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
medium | 6.4 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101718 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
medium | 6.5 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101721 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
medium | 4.9 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101697 Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business... |
medium | 6.1 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-101701 Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business S... |
medium | 6.0 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-106566 ImageMagick is free and open-source software used for editing and manipulating d... |
medium | 4.4 | — | Imagemagick / imagemagick | 2026-10-07 | 2026-10-22 |
| CVE-2026-106568 ImageMagick is free and open-source software used for editing and manipulating d... |
medium | 5.3 | — | Imagemagick / imagemagick | 2026-10-07 | 2026-10-22 |
| CVE-2026-95640 Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that c... |
medium | 5.5 | — | Adobe / photoshop | 2026-10-13 | 2026-10-22 |
| CVE-2014-125131 DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that... |
medium | 6.1 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2016-20102 JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability... |
medium | 6.1 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-114389 Chamilo LMS from 2.0.0-alpha.4 before 2.0.0-RC.3 contains a missing authorizatio... |
medium | 4.3 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-114390 Chamilo LMS from 2.0.0-alpha.1 before 2.0.0-RC.3 contains a missing authorizatio... |
medium | 5.3 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-114407 e107 CMS before 2.3.13 contains a reflected cross-site scripting vulnerability t... |
medium | 6.1 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-53986 Girafit camera app (Android and iOS) version 1.9.1 and earlier, and Girafit came... |
medium | 5.3 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-114060 SvelteKit (@sveltejs/kit) before 3.0.0 contains an open redirect vulnerability i... |
medium | 4.7 | — | — | 2026-10-21 | 2026-10-22 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.