October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,768
Critical
3,176
High
7,280
Medium
7,128
Low
648
Severity not reported
4,536
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1426), linux (722), google (413), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-84007 Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attack... |
medium | 6.5 | — | Microsoft / windows server 2012 | 2026-10-13 | 2026-10-19 |
| CVE-2026-84009 Time-of-check time-of-use (toctou) race condition in Windows Projected File Syst... |
medium | 4.7 | — | Microsoft / windows 10 1809 | 2026-10-13 | 2026-10-19 |
| CVE-2026-84011 Incorrect authorization in Windows SMB Client allows an authorized attacker to b... |
medium | 5.5 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-19 |
| CVE-2026-112076 A security vulnerability has been detected in alexta69 MeTube up to 2026.09.28. |
medium | 5.6 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112080 A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cf... |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112086 A vulnerability was found in ESPnet up to 202610.post2. |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112090 A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d6... |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112094 A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. |
medium | 5.5 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112098 A security flaw has been discovered in DeepPavlov up to 1.7.0. |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112033 A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.16. |
medium | 4.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112045 A vulnerability was detected in donetick up to 0.1.82. |
medium | 5.4 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-100799 Uninitialized memory in the Graphics: WebGPU component. |
medium | 4.3 | — | Mozilla / firefox | 2026-09-29 | 2026-10-19 |
| CVE-2026-100802 Uninitialized memory in the Graphics: WebGPU component. |
medium | 4.3 | — | Mozilla / firefox | 2026-09-29 | 2026-10-19 |
| CVE-2026-100806 Uninitialized memory in the Graphics: WebGPU component. |
medium | 4.3 | — | Mozilla / firefox | 2026-09-29 | 2026-10-19 |
| CVE-2026-96628 Arcane is an interface for managing Docker containers, images, networks, and vol... |
medium | 4.3 | — | — | 2026-10-16 | 2026-10-19 |
| CVE-2026-112265 LangBot through 4.11.0 contains a missing authenticity verification vulnerabilit... |
medium | 6.5 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112270 SGLang through 0.5.22 with the Mooncake disaggregation backend contains an uncon... |
medium | 6.5 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112101 A vulnerability was determined in BlackBeltTechnology pi-agent-dashboard up to 0... |
medium | 4.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112102 A vulnerability was detected in AXA Group NLP.js 4.27.0. |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112083 A security flaw has been discovered in sgl-project SGLang up to 0.5.19. |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112088 A weakness has been identified in Dav-ee dairy-management-system 31ace9692d1e1e6... |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112089 A security vulnerability has been detected in Dav-ee dairy-management-system 31a... |
medium | 4.7 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112092 A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee... |
medium | 4.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112093 A vulnerability has been found in subhajitkhan online-clinic-management-system u... |
medium | 4.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112074 A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a46... |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112075 A weakness has been identified in unslothai unsloth up to 0.1.501-beta. |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112078 A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up t... |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112079 A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112040 A vulnerability was determined in diem-project diem up to 116974edfb9a5b8bd69cb1... |
medium | 4.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112043 A weakness has been identified in calcom cal.com and cal.diy up to 6.2.0. |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112028 A flaw has been found in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/... |
medium | 6.5 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-112032 A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16. |
medium | 4.7 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112035 A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16... |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112036 A vulnerability was detected in Artifex MuPDF up to 1.28.5. |
medium | 4.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112002 ProjectSend 2.5.0 before 2.7.0 contains an unverified password change vulnerabil... |
medium | 6.8 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-111992 A vulnerability was detected in itsmeravitejak Online-Examination-System up to e... |
medium | 6.3 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-112027 A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99... |
medium | 5.3 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-111984 A vulnerability has been found in AUTOMATIC1111 stable-diffusion-webui up to 1.1... |
medium | 4.3 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-111987 A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.1... |
medium | 4.3 | — | — | 2026-10-18 | 2026-10-19 |
| CVE-2026-111988 A security flaw has been discovered in dyad-sh dyad up to 1.16.0. |
medium | 4.3 | — | — | 2026-10-18 | 2026-10-19 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.