October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,236
Critical
3,260
High
7,822
Medium
7,473
Low
727
Severity not reported
4,954
In CISA KEV
190
Most affected vendors (by CPE data where available): microsoft (1401), google (814), linux (722), ibm (323), oracle (193), mozilla (182), adobe (156), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2025-54943 A missing authorization vulnerability in SUNNET Corporate Training Management Sy... |
critical | 9.8 | — | Sun.net / ehrd ctms | 2025-08-30 | 2026-10-18 |
| CVE-2025-54944 An unrestricted upload of file with dangerous type vulnerability in SUNNET Corpo... |
critical | 9.8 | — | Sun.net / ehrd ctms | 2025-08-30 | 2026-10-18 |
| CVE-2025-54945 An external control of file name or path vulnerability in SUNNET Corporate Train... |
critical | 9.8 | — | Sun.net / ehrd ctms | 2025-08-30 | 2026-10-18 |
| CVE-2025-54946 A SQL injection vulnerability in SUNNET Corporate Training Management System bef... |
critical | 9.8 | — | Sun.net / ehrd ctms | 2025-08-30 | 2026-10-18 |
| CVE-2025-9679 A security vulnerability has been detected in itsourcecode Student Information S... |
critical | 9.8 | — | Facebook-julykringcadayona / student information system | 2025-08-30 | 2026-10-18 |
| CVE-2025-0165 IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data 4.8.4, 4.8.5, and 5... |
critical | 9.8 | — | Ibm / watsonx orchestrate cartridge for ibm cloud pak for data | 2025-08-30 | 2026-10-18 |
| CVE-2025-9691 A vulnerability has been found in Campcodes Online Shopping System 1.0. |
critical | 9.8 | — | Campcodes / online shopping system | 2025-08-30 | 2026-10-18 |
| CVE-2025-9692 A vulnerability was found in Campcodes Online Shopping System 1.0. |
critical | 9.8 | — | Campcodes / online shopping system | 2025-08-30 | 2026-10-18 |
| CVE-2025-9694 A vulnerability was determined in Campcodes Advanced Online Voting System 1.0. |
critical | 9.8 | — | Campcodes / advanced online voting system | 2025-08-30 | 2026-10-18 |
| CVE-2025-9699 A vulnerability was detected in SourceCodester Online Polling System Code 1.0. |
critical | 9.8 | — | Razormist / online polling system | 2025-08-30 | 2026-10-18 |
| CVE-2025-9700 A flaw has been found in SourceCodester Online Book Store 1.0. |
critical | 9.8 | — | Janobe / online book store | 2025-08-30 | 2026-10-18 |
| CVE-2025-9701 A vulnerability was determined in SourceCodester Simple Cafe Billing System 1.0. |
critical | 9.8 | — | Oretnom23 / simple cafe billing system | 2025-08-30 | 2026-10-18 |
| CVE-2025-9702 A vulnerability was identified in SourceCodester Simple Cafe Billing System 1.0. |
critical | 9.8 | — | Oretnom23 / simple cafe billing system | 2025-08-30 | 2026-10-18 |
| CVE-2025-9704 A security flaw has been discovered in SourceCodester Water Billing System 1.0. |
critical | 9.8 | — | Janobe / water billing system | 2025-08-30 | 2026-10-18 |
| CVE-2025-9705 A weakness has been identified in SourceCodester Water Billing System 1.0. |
critical | 9.8 | — | Janobe / water billing system | 2025-08-30 | 2026-10-18 |
| CVE-2025-9706 A security vulnerability has been detected in SourceCodester Water Billing Syste... |
critical | 9.8 | — | Janobe / water billing system | 2025-08-30 | 2026-10-18 |
| CVE-2025-9726 A security flaw has been discovered in Campcodes Farm Management System 1.0. |
critical | 9.8 | — | Campcodes / farm management system | 2025-08-31 | 2026-10-18 |
| CVE-2025-9727 A weakness has been identified in D-Link DIR-816L 206b01. |
critical | 9.8 | — | Dlink / dir-816l firmware | 2025-08-31 | 2026-10-18 |
| CVE-2025-9729 A vulnerability was detected in PHPGurukul Online Course Registration 3.1. |
critical | 9.8 | — | Phpgurukul / online course registration | 2025-08-31 | 2026-10-18 |
| CVE-2025-9730 A vulnerability was found in itsourcecode Apartment Management System 1.0. |
critical | 9.8 | — | Admerc / apartment management system | 2025-08-31 | 2026-10-18 |
| CVE-2025-9733 A security flaw has been discovered in code-projects Human Resource Integrated S... |
critical | 9.8 | — | Fabian / human resource integrated system | 2025-08-31 | 2026-10-18 |
| CVE-2025-9739 A vulnerability has been found in Campcodes Online Water Billing System 1.0. |
critical | 9.8 | — | Campcodes / online water billing system | 2025-08-31 | 2026-10-18 |
| CVE-2025-9740 A vulnerability was found in code-projects Human Resource Integrated System 1.0. |
critical | 9.8 | — | Code-projects / human resource integrated system | 2025-08-31 | 2026-10-18 |
| CVE-2025-9743 A security flaw has been discovered in code-projects Human Resource Integrated S... |
critical | 9.8 | — | Code-projects / human resource integrated system | 2025-08-31 | 2026-10-18 |
| CVE-2025-9744 A weakness has been identified in Campcodes Online Loan Management System 1.0. |
critical | 9.8 | — | Campcodes / online loan management system | 2025-08-31 | 2026-10-18 |
| CVE-2025-9748 A vulnerability was determined in Tenda CH22 1.0.0.1. |
critical | 9.8 | — | Tenda / ch22 firmware | 2025-08-31 | 2026-10-18 |
| CVE-2025-9749 A vulnerability was identified in HKritesh009 Grocery List Management Web App up... |
critical | 9.8 | — | Hkritesh009 / grocery list management web | 2025-08-31 | 2026-10-18 |
| CVE-2025-9750 A security flaw has been discovered in Campcodes Online Learning Management Syst... |
critical | 9.8 | — | Campcodes / online learning management system | 2025-08-31 | 2026-10-18 |
| CVE-2025-9757 A vulnerability was determined in Campcodes/SourceCodester Courier Management Sy... |
critical | 9.8 | — | Campcodes / courier management system | 2025-09-01 | 2026-10-18 |
| CVE-2025-9759 A security flaw has been discovered in Campcodes/SourceCodester Courier Manageme... |
critical | 9.8 | — | Campcodes / courier management system | 2025-09-01 | 2026-10-18 |
| CVE-2025-9788 A vulnerability was determined in SourceCodester/Campcodes School Log Management... |
critical | 9.8 | — | Campcodes / school log management system | 2025-09-01 | 2026-10-18 |
| CVE-2025-54914 Azure Networking Elevation of Privilege Vulnerability |
critical | 9.8 | — | Microsoft / azure networking | 2025-09-04 | 2026-10-18 |
| CVE-2025-54261 ColdFusion versions 2025.3, 2023.15, 2021.21 and earlier are affected by an Impr... |
critical | 10.0 | — | Adobe / coldfusion | 2025-09-09 | 2026-10-18 |
| CVE-2025-55727 XWiki Remote Macros provides XWiki rendering macros that are useful when migrati... |
critical | 9.8 | — | Xwiki / pro macros | 2025-09-09 | 2026-10-18 |
| CVE-2025-55728 XWiki Remote Macros provides XWiki rendering macros that are useful when migrati... |
critical | 9.8 | — | Xwiki / pro macros | 2025-09-09 | 2026-10-18 |
| CVE-2025-36222 IBM Fusion 2.2.0 through 2.10.1, IBM Fusion HCI 2.2.0 through 2.10.0, and IBM Fu... |
critical | 9.8 | — | Ibm / storage fusion | 2025-09-11 | 2026-10-18 |
| CVE-2025-34192 Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22... |
critical | 9.8 | — | Vasion / virtual appliance application | 2025-09-19 | 2026-10-18 |
| CVE-2025-34193 Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 25... |
critical | 9.8 | — | Vasion / virtual appliance application | 2025-09-19 | 2026-10-18 |
| CVE-2025-34195 Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 1.... |
critical | 9.8 | — | Vasion / virtual appliance application | 2025-09-19 | 2026-10-18 |
| CVE-2025-34198 Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22... |
critical | 9.8 | — | Vasion / virtual appliance application | 2025-09-19 | 2026-10-18 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.