October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,620
Critical
3,170
High
7,238
Medium
7,074
Low
640
Severity not reported
4,498
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (322), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-73796 A security vulnerability in HPE NonStop TSQLEXE may cause application crash via... |
medium | 4.4 | — | — | 2026-10-14 | 2026-10-14 |
| CVE-2026-73797 A security vulnerability in HPE NonStop TSQLFIL may cause address space corrupti... |
medium | 5.3 | — | — | 2026-10-14 | 2026-10-14 |
| CVE-2026-106171 A improper neutralization of special elements used in an os command ('os command... |
medium | 6.1 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-106172 A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2... |
medium | 5.3 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-103856 Adobe Framemaker is affected by an out-of-bounds read vulnerability that could l... |
medium | 5.5 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-103857 Adobe Framemaker is affected by an out-of-bounds read vulnerability that could l... |
medium | 5.5 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-104343 Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that co... |
medium | 5.5 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-103853 Dimension is affected by an out-of-bounds read vulnerability that could lead to... |
medium | 5.5 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-103855 Dimension is affected by a NULL Pointer Dereference vulnerability that could res... |
medium | 5.5 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-100126 Bridge is affected by an out-of-bounds read vulnerability that could lead to dis... |
medium | 5.5 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-100130 Substance3D - Sampler is affected by an out-of-bounds read vulnerability that co... |
medium | 5.5 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-100131 Substance3D - Sampler is affected by an out-of-bounds read vulnerability that co... |
medium | 5.5 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-16495 The Countdown Timer – Widget Countdown plugin for WordPress is vulnerable to Sto... |
medium | 6.4 | — | — | 2026-10-14 | 2026-10-14 |
| CVE-2026-109963 Froxlor before 2.3.14 contains an insecure direct object reference vulnerability... |
medium | 4.3 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-107650 The GeoDirectory – WP Business Directory Plugin and Classified Listings Director... |
medium | 6.4 | — | — | 2026-10-14 | 2026-10-14 |
| CVE-2026-107757 The Gallery Custom Links plugin for WordPress is vulnerable to Stored Cross-Site... |
medium | 4.9 | — | — | 2026-10-14 | 2026-10-14 |
| CVE-2026-104761 The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting... |
medium | 6.4 | — | — | 2026-10-14 | 2026-10-14 |
| CVE-2026-103028 SFTPGo is an open source, event-driven file transfer solution. |
medium | 4.3 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-103369 The Social Share Buttons & Analytics Plugin – GetSocial.io plugin for WordPress... |
medium | 6.4 | — | — | 2026-10-14 | 2026-10-14 |
| CVE-2026-87676 A stack-based buffer overflow vulnerability exists in the security library compo... |
medium | 5.7 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87678 An input validation and output encoding vulnerability exists in the web manageme... |
medium | 5.2 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87686 An authentication and access control bypass vulnerability exists in the web serv... |
medium | 4.3 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-94575 A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management... |
medium | 5.7 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-109958 EspoCRM 4.0.0 before 10.0.7 contains an improper access control vulnerability th... |
medium | 4.3 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-109614 Frappe ERPNext before 16.34.0 contains a missing authorization vulnerability tha... |
medium | 6.5 | — | — | 2026-10-12 | 2026-10-14 |
| CVE-2026-109672 Frappe ERPNext before 15.118.0 and 16.x before 16.27.0 contains a missing author... |
medium | 6.5 | — | — | 2026-10-12 | 2026-10-14 |
| CVE-2026-109402 A vulnerability was found in conductor-oss conductor 3.22.0. |
medium | 6.3 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-109406 A weakness has been identified in macrozheng mall up to 1.0.3. |
medium | 5.4 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-108962 A vulnerability has been found in storyicon comfyui_segment_anything up to ab639... |
medium | 6.3 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-108944 A security vulnerability has been detected in repository RAE up to a4d18c4db7664... |
medium | 4.8 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-108954 A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. |
medium | 6.3 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-108958 A weakness has been identified in TensorLayer up to 2.2.4. |
medium | 6.3 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-107822 MariaDB server is a community developed fork of MySQL server. |
medium | 6.4 | — | Mariadb / mariadb | 2026-10-09 | 2026-10-14 |
| CVE-2026-107817 MariaDB server is a community developed fork of MySQL server. |
medium | 4.4 | — | Mariadb / mariadb | 2026-10-09 | 2026-10-14 |
| CVE-2026-107816 MariaDB server is a community developed fork of MySQL server. |
medium | 6.4 | — | Mariadb / mariadb | 2026-10-09 | 2026-10-14 |
| CVE-2026-104661 GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 bef... |
medium | 4.3 | — | Gitlab / gitlab | 2026-10-13 | 2026-10-14 |
| CVE-2026-105458 GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 bef... |
medium | 4.3 | — | Gitlab / gitlab | 2026-10-13 | 2026-10-14 |
| CVE-2026-5954 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1... |
medium | 4.2 | — | Gitlab / gitlab | 2026-10-13 | 2026-10-14 |
| CVE-2026-6567 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8... |
medium | 4.3 | — | Gitlab / gitlab | 2026-10-13 | 2026-10-14 |
| CVE-2026-87672 An information disclosure vulnerability exists in the SupportLink diagnostic col... |
medium | 5.5 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.