October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,620
Critical
3,170
High
7,238
Medium
7,074
Low
640
Severity not reported
4,498
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (322), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2023-54412 Frappe before 13.46.3 and 14.x before 14.21.1 contains an improper access contro... |
medium | 6.5 | — | — | 2026-10-12 | 2026-10-14 |
| CVE-2026-76270 In Splunk Enterprise versions below 10.4.3, a user that holds a role with the li... |
medium | 6.5 | — | Splunk / splunk | 2026-10-07 | 2026-10-14 |
| CVE-2026-76271 In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low-privilege... |
medium | 6.5 | — | Splunk / splunk | 2026-10-07 | 2026-10-14 |
| CVE-2026-76272 In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user... |
medium | 4.3 | — | Splunk / splunk | 2026-10-07 | 2026-10-14 |
| CVE-2026-76273 In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user... |
medium | 4.3 | — | Splunk / splunk | 2026-10-07 | 2026-10-14 |
| CVE-2026-76274 In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that hol... |
medium | 6.5 | — | Splunk / splunk | 2026-10-07 | 2026-10-14 |
| CVE-2026-76275 In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user... |
medium | 4.3 | — | Splunk / splunk | 2026-10-07 | 2026-10-14 |
| CVE-2026-76276 In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low-privilege... |
medium | 4.3 | — | Splunk / splunk | 2026-10-07 | 2026-10-14 |
| CVE-2026-76277 In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user... |
medium | 4.1 | — | Splunk / splunk | 2026-10-07 | 2026-10-14 |
| CVE-2026-76278 In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that hol... |
medium | 4.3 | — | Splunk / splunk | 2026-10-07 | 2026-10-14 |
| CVE-2026-76279 In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user... |
medium | 4.3 | — | Splunk / splunk | 2026-10-07 | 2026-10-14 |
| CVE-2026-76280 In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Spl... |
medium | 6.3 | — | Splunk / splunk | 2026-10-07 | 2026-10-14 |
| CVE-2026-18533 IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and... |
medium | 6.5 | — | — | 2026-10-12 | 2026-10-14 |
| CVE-2026-48484 pyLoad is a free and open-source download manager written in Python. |
medium | 6.5 | — | — | 2026-10-09 | 2026-10-14 |
| CVE-2026-108658 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Sy... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108663 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Sy... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108668 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Ai... |
medium | 5.4 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108673 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Ai... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108678 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the qu... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108703 CordysCRM through 1.9.3 contains a missing authorization vulnerability in POST /... |
medium | 5.4 | — | — | 2026-10-11 | 2026-10-14 |
| CVE-2026-108633 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allo... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108638 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allo... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108643 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allo... |
medium | 5.4 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108648 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GE... |
medium | 6.5 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108653 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the qu... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108608 JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerabili... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108613 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Ai... |
medium | 5.4 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108618 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allo... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108544 A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.... |
medium | 6.3 | — | — | 2026-10-11 | 2026-10-14 |
| CVE-2026-108569 A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. |
medium | 6.3 | — | — | 2026-10-11 | 2026-10-14 |
| CVE-2026-108573 A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. |
medium | 5.5 | — | — | 2026-10-11 | 2026-10-14 |
| CVE-2026-108093 A flaw was found in GIMP. |
medium | 5.5 | — | — | 2026-10-09 | 2026-10-14 |
| CVE-2026-107388 music-metadata is a metadata parser for audio and video media files. |
medium | 5.5 | — | Borewit / music-metadata | 2026-10-08 | 2026-10-14 |
| CVE-2026-82918 XG VisionTerminal, XG-X VisionTerminal, LJ Series Terminal-Software and WI Serie... |
medium | 5.5 | — | — | 2026-09-03 | 2026-10-14 |
| CVE-2026-78016 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16,... |
medium | 4.3 | — | Dell / policy manager for secure connect gateway | 2026-10-09 | 2026-10-14 |
| CVE-2026-78021 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16,... |
medium | 5.3 | — | Dell / policy manager for secure connect gateway | 2026-10-09 | 2026-10-14 |
| CVE-2026-108103 Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogs_pf... |
medium | 5.3 | — | — | 2026-10-09 | 2026-10-14 |
| CVE-2026-108110 MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-ap... |
medium | 6.8 | — | — | 2026-10-09 | 2026-10-14 |
| CVE-2026-107796 Jivejdon from commit 5489372d through commit ee67a65e contains a reflected cross... |
medium | 6.1 | — | — | 2026-10-08 | 2026-10-14 |
| CVE-2026-107801 Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that a... |
medium | 5.4 | — | — | 2026-10-08 | 2026-10-14 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.