October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,180
Critical
3,256
High
7,786
Medium
7,443
Low
727
Severity not reported
4,968
In CISA KEV
190
Most affected vendors (by CPE data where available): microsoft (1401), google (814), linux (719), ibm (323), oracle (193), mozilla (182), adobe (155), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2025-64164 Dataease is an open source data visualization analysis tool. |
critical | 9.8 | — | Dataease / dataease | 2025-11-06 | 2026-10-19 |
| CVE-2025-64717 ZITADEL is an open source identity management platform. |
critical | 9.8 | — | Zitadel / zitadel | 2025-11-13 | 2026-10-19 |
| CVE-2025-13168 A weakness has been identified in ury-erp ury up to 0.2.0. |
critical | 9.8 | — | Ury / ury | 2025-11-14 | 2026-10-19 |
| CVE-2025-64428 Dataease is an open source data visualization analysis tool. |
critical | 9.8 | — | Dataease / dataease | 2025-11-20 | 2026-10-19 |
| CVE-2025-30201 Wazuh is a free and open source platform used for threat prevention, detection,... |
critical | 9.1 | — | Wazuh / wazuh | 2025-11-21 | 2026-10-19 |
| CVE-2025-66205 Frappe is a full-stack web application framework. |
critical | 9.8 | — | Frappe / frappe | 2025-12-01 | 2026-10-19 |
| CVE-2026-89068 Missing critical step in authentication vulnerability in Progress MOVEit Transfe... |
critical | 9.8 | — | Progress / moveit transfer | 2026-10-14 | 2026-10-19 |
| CVE-2026-84286 ExLlamaV3’s EXL3 loader uses an untrusted, model-supplied index to select a CUDA... |
critical | 9.8 | — | — | 2026-10-12 | 2026-10-19 |
| CVE-2026-109740 Sandbox escape due to incorrect boundary conditions in the Widget: Win32 compone... |
critical | 9.6 | — | — | 2026-10-13 | 2026-10-19 |
| CVE-2026-89073 Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. |
critical | 9.8 | — | Progress / moveit transfer | 2026-10-14 | 2026-10-19 |
| CVE-2026-98365 In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: F... |
critical | 9.8 | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-98323 In the Linux kernel, the following vulnerability has been resolved:
RDMA/siw: B... |
critical | 9.8 | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-93207 In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: Zer... |
critical | 9.8 | — | — | 2026-09-24 | 2026-10-19 |
| CVE-2026-92489 In the Linux kernel, the following vulnerability has been resolved:
xfrm: Fix s... |
critical | 9.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90413 In the Linux kernel, the following vulnerability has been resolved:
IB/isert: r... |
critical | 9.1 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90414 In the Linux kernel, the following vulnerability has been resolved:
IB/isert: r... |
critical | 9.1 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90230 In the Linux kernel, the following vulnerability has been resolved:
nvmet: fix... |
critical | 9.1 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90173 In the Linux kernel, the following vulnerability has been resolved:
smb: smbdir... |
critical | 9.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90151 In the Linux kernel, the following vulnerability has been resolved:
NFSv4: remo... |
critical | 9.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90110 In the Linux kernel, the following vulnerability has been resolved:
inetpeer: r... |
critical | 9.4 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90049 In the Linux kernel, the following vulnerability has been resolved:
net: skbuff... |
critical | 9.3 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-90038 In the Linux kernel, the following vulnerability has been resolved:
NFSD: Preve... |
critical | 9.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-90012 In the Linux kernel, the following vulnerability has been resolved:
spi: Fix DM... |
critical | 9.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-90011 In the Linux kernel, the following vulnerability has been resolved:
scsi: targe... |
critical | 9.1 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89990 In the Linux kernel, the following vulnerability has been resolved:
ceph: lock... |
critical | 9.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89969 In the Linux kernel, the following vulnerability has been resolved:
nvmet-tcp:... |
critical | 9.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89970 In the Linux kernel, the following vulnerability has been resolved:
nvmet-auth:... |
critical | 9.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89916 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
critical | 9.3 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89918 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
critical | 9.3 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89914 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
critical | 9.3 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89915 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
critical | 9.3 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89857 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
critical | 9.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89846 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
critical | 9.1 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89847 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
critical | 9.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89786 In the Linux kernel, the following vulnerability has been resolved:
ext4: fix o... |
critical | 9.1 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89778 In the Linux kernel, the following vulnerability has been resolved:
isofs: fix... |
critical | 9.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89779 In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: v... |
critical | 9.1 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89783 In the Linux kernel, the following vulnerability has been resolved:
xfrm6: fix... |
critical | 9.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89775 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
critical | 9.3 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89712 In the Linux kernel, the following vulnerability has been resolved:
NFSD: resta... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.