October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,180
Critical
3,256
High
7,786
Medium
7,443
Low
727
Severity not reported
4,968
In CISA KEV
190
Most affected vendors (by CPE data where available): microsoft (1401), google (814), linux (719), ibm (323), oracle (193), mozilla (182), adobe (155), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-89495 In the Linux kernel, the following vulnerability has been resolved:
ocfs2: boun... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89485 In the Linux kernel, the following vulnerability has been resolved:
lockd: pin... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89479 In the Linux kernel, the following vulnerability has been resolved:
sctp: stop... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89482 In the Linux kernel, the following vulnerability has been resolved:
nvme-tcp: d... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89478 In the Linux kernel, the following vulnerability has been resolved:
sctp: drop... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-81002 In the Linux kernel, the following vulnerability has been resolved:
xdp: fix ze... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80986 In the Linux kernel, the following vulnerability has been resolved:
net/smc: bo... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80981 In the Linux kernel, the following vulnerability has been resolved:
net/smc: fi... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80976 In the Linux kernel, the following vulnerability has been resolved:
seg6: reset... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80945 In the Linux kernel, the following vulnerability has been resolved:
crypto: iaa... |
critical | 9.1 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80926 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-100075 In the Linux kernel, the following vulnerability has been resolved:
RDMA/srpt:... |
critical | 9.8 | — | Linux / linux kernel | 2026-09-25 | 2026-10-19 |
| CVE-2025-10035 Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability |
critical | 9.8 | Listed | Fortra / GoAnywhere MFT | 2025-09-18 | 2026-10-18 |
| CVE-2025-20333 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Thre... |
critical | 9.9 | Listed | Cisco / Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense | 2025-09-25 | 2026-10-18 |
| CVE-2025-53690 Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability |
critical | 9.0 | Listed | Sitecore / Multiple Products | 2025-09-03 | 2026-10-18 |
| CVE-2025-9596 A vulnerability was determined in itsourcecode Sports Management System 1.0. |
critical | 9.8 | — | Angeljudesuarez / sports management system | 2025-08-29 | 2026-10-18 |
| CVE-2025-9597 A vulnerability was identified in itsourcecode Apartment Management System 1.0. |
critical | 9.8 | — | Admerc / apartment management system | 2025-08-29 | 2026-10-18 |
| CVE-2025-9598 A security flaw has been discovered in itsourcecode Apartment Management System... |
critical | 9.8 | — | Admerc / apartment management system | 2025-08-29 | 2026-10-18 |
| CVE-2025-9599 A weakness has been identified in itsourcecode Apartment Management System 1.0. |
critical | 9.8 | — | Admerc / apartment management system | 2025-08-29 | 2026-10-18 |
| CVE-2025-9600 A security vulnerability has been detected in itsourcecode Apartment Management... |
critical | 9.8 | — | Admerc / apartment management system | 2025-08-29 | 2026-10-18 |
| CVE-2025-9601 A vulnerability was detected in itsourcecode Apartment Management System 1.0. |
critical | 9.8 | — | Admerc / apartment management system | 2025-08-29 | 2026-10-18 |
| CVE-2025-9603 A vulnerability was determined in Telesquare TLR-2005KSH 1.2.4. |
critical | 9.8 | — | Telesquare / tlr-2005ksh firmware | 2025-08-29 | 2026-10-18 |
| CVE-2025-9610 A vulnerability was determined in code-projects Online Event Judging System 1.0. |
critical | 9.8 | — | Carmelo / online event judging system | 2025-08-29 | 2026-10-18 |
| CVE-2025-9643 A vulnerability was found in itsourcecode Apartment Management System 1.0. |
critical | 9.8 | — | Admerc / apartment management system | 2025-08-29 | 2026-10-18 |
| CVE-2025-9644 A vulnerability was determined in itsourcecode Apartment Management System 1.0. |
critical | 9.8 | — | Admerc / apartment management system | 2025-08-29 | 2026-10-18 |
| CVE-2025-9645 A vulnerability was identified in itsourcecode Apartment Management System 1.0. |
critical | 9.8 | — | Admerc / apartment management system | 2025-08-29 | 2026-10-18 |
| CVE-2025-9660 A vulnerability was found in SourceCodester Bakeshop Online Ordering System 1.0. |
critical | 9.8 | — | Janobe / bakeshop online ordering system | 2025-08-29 | 2026-10-18 |
| CVE-2025-9662 A vulnerability was determined in code-projects Simple Grading System 1.0. |
critical | 9.8 | — | Fabian / simple grading system | 2025-08-29 | 2026-10-18 |
| CVE-2025-52856 An improper authentication vulnerability has been reported to affect VioStor. |
critical | 9.8 | — | Qnap / qvr | 2025-08-29 | 2026-10-18 |
| CVE-2025-43773 Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 thr... |
critical | 9.1 | — | Liferay / digital experience platform | 2025-08-29 | 2026-10-18 |
| CVE-2025-9669 A vulnerability has been found in Jinher OA 1.0. |
critical | 9.8 | — | Jinher / jinher oa | 2025-08-29 | 2026-10-18 |
| CVE-2025-9678 A weakness has been identified in Campcodes Online Loan Management System 1.0. |
critical | 9.8 | — | Campcodes / online loan management system | 2025-08-29 | 2026-10-18 |
| CVE-2025-54942 A missing authentication for critical function vulnerability in SUNNET Corporate... |
critical | 9.8 | — | Sun.net / ehrd ctms | 2025-08-30 | 2026-10-18 |
| CVE-2025-54943 A missing authorization vulnerability in SUNNET Corporate Training Management Sy... |
critical | 9.8 | — | Sun.net / ehrd ctms | 2025-08-30 | 2026-10-18 |
| CVE-2025-54944 An unrestricted upload of file with dangerous type vulnerability in SUNNET Corpo... |
critical | 9.8 | — | Sun.net / ehrd ctms | 2025-08-30 | 2026-10-18 |
| CVE-2025-54945 An external control of file name or path vulnerability in SUNNET Corporate Train... |
critical | 9.8 | — | Sun.net / ehrd ctms | 2025-08-30 | 2026-10-18 |
| CVE-2025-54946 A SQL injection vulnerability in SUNNET Corporate Training Management System bef... |
critical | 9.8 | — | Sun.net / ehrd ctms | 2025-08-30 | 2026-10-18 |
| CVE-2025-9679 A security vulnerability has been detected in itsourcecode Student Information S... |
critical | 9.8 | — | Facebook-julykringcadayona / student information system | 2025-08-30 | 2026-10-18 |
| CVE-2025-0165 IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data 4.8.4, 4.8.5, and 5... |
critical | 9.8 | — | Ibm / watsonx orchestrate cartridge for ibm cloud pak for data | 2025-08-30 | 2026-10-18 |
| CVE-2025-9691 A vulnerability has been found in Campcodes Online Shopping System 1.0. |
critical | 9.8 | — | Campcodes / online shopping system | 2025-08-30 | 2026-10-18 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.