October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,236
Critical
3,260
High
7,822
Medium
7,473
Low
727
Severity not reported
4,954
In CISA KEV
190
Most affected vendors (by CPE data where available): microsoft (1401), google (814), linux (722), ibm (323), oracle (193), mozilla (182), adobe (156), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2025-12553 Email Server Certificate Verification Disabled.This issue affects BLU-IC2: throu... |
critical | 9.8 | — | Azure-access / blu-ic2 firmware | 2025-10-31 | 2026-10-18 |
| CVE-2025-12554 Missing Security Headers.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: th... |
critical | 9.8 | — | Azure-access / blu-ic2 firmware | 2025-10-31 | 2026-10-18 |
| CVE-2025-12599 Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000).This issu... |
critical | 9.8 | — | Azure-access / blu-ic2 firmware | 2025-11-01 | 2026-10-18 |
| CVE-2025-12600 Web UI Malfunction when setting unexpected locale via API.This issue affects BLU... |
critical | 9.8 | — | Azure-access / blu-ic2 firmware | 2025-11-01 | 2026-10-18 |
| CVE-2025-12602 /etc/avahi/services/z9.service can be Arbitrarily Written.This issue affects BLU... |
critical | 9.8 | — | Azure-access / blu-ic2 firmware | 2025-11-01 | 2026-10-18 |
| CVE-2025-12603 /etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.1... |
critical | 9.8 | — | Azure-access / blu-ic2 firmware | 2025-11-01 | 2026-10-18 |
| CVE-2025-12595 A weakness has been identified in Tenda AC23 16.03.07.52. |
critical | 9.8 | — | Tenda / ac23 firmware | 2025-11-02 | 2026-10-18 |
| CVE-2025-12596 A security vulnerability has been detected in Tenda AC23 16.03.07.52. |
critical | 9.8 | — | Tenda / ac23 firmware | 2025-11-02 | 2026-10-18 |
| CVE-2025-12597 A vulnerability was detected in SourceCodester Best House Rental Management Syst... |
critical | 9.8 | — | Mayurik / best house rental management system | 2025-11-02 | 2026-10-18 |
| CVE-2025-12598 A flaw has been found in SourceCodester Best House Rental Management System 1.0. |
critical | 9.8 | — | Mayurik / best house rental management system | 2025-11-02 | 2026-10-18 |
| CVE-2025-12604 A vulnerability has been found in itsourcecode Online Loan Management System 1.0... |
critical | 9.8 | — | Angeljudesuarez / online loan management system | 2025-11-02 | 2026-10-18 |
| CVE-2025-12605 A vulnerability was found in itsourcecode Online Loan Management System 1.0. |
critical | 9.8 | — | Angeljudesuarez / online loan management system | 2025-11-02 | 2026-10-18 |
| CVE-2025-12606 A vulnerability was determined in itsourcecode Online Loan Management System 1.0... |
critical | 9.8 | — | Angeljudesuarez / online loan management system | 2025-11-03 | 2026-10-18 |
| CVE-2025-12607 A vulnerability was identified in itsourcecode Online Loan Management System 1.0... |
critical | 9.8 | — | Angeljudesuarez / online loan management system | 2025-11-03 | 2026-10-18 |
| CVE-2025-12608 A security flaw has been discovered in itsourcecode Online Loan Management Syste... |
critical | 9.8 | — | Angeljudesuarez / online loan management system | 2025-11-03 | 2026-10-18 |
| CVE-2025-12611 A vulnerability was identified in Tenda AC21 16.03.08.16. |
critical | 9.8 | — | Tenda / ac21 firmware | 2025-11-03 | 2026-10-18 |
| CVE-2025-12612 A security flaw has been discovered in Campcodes School Fees Payment Management... |
critical | 9.8 | — | Campcodes / school fees payment management system | 2025-11-03 | 2026-10-18 |
| CVE-2025-12614 A weakness has been identified in SourceCodester Best House Rental Management Sy... |
critical | 9.8 | — | Mayurik / best house rental management system | 2025-11-03 | 2026-10-18 |
| CVE-2025-12617 A flaw has been found in itsourcecode Billing System 1.0. |
critical | 9.8 | — | Angeljudesuarez / billing system | 2025-11-03 | 2026-10-18 |
| CVE-2025-12618 A vulnerability has been found in Tenda AC8 16.03.34.06. |
critical | 9.8 | — | Tenda / ac8 firmware | 2025-11-03 | 2026-10-18 |
| CVE-2025-12619 A vulnerability was found in Tenda A15 15.13.07.13. |
critical | 9.8 | — | Tenda / a15 firmware | 2025-11-03 | 2026-10-18 |
| CVE-2025-12622 A vulnerability was determined in Tenda AC10 16.03.10.13. |
critical | 9.8 | — | Tenda / ac10 firmware | 2025-11-03 | 2026-10-18 |
| CVE-2025-12531 IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to an... |
critical | 9.1 | — | Ibm / infosphere information server | 2025-11-03 | 2026-10-18 |
| CVE-2025-54863 Radiometrics VizAir is vulnerable to exposure of the system's REST API key throu... |
critical | 9.8 | — | Radiometrics / vizair | 2025-11-04 | 2026-10-18 |
| CVE-2025-61945 Radiometrics VizAir is vulnerable to any remote attacker via access to the admin... |
critical | 9.8 | — | Radiometrics / vizair | 2025-11-04 | 2026-10-18 |
| CVE-2025-61956 Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for cri... |
critical | 9.8 | — | Radiometrics / vizair | 2025-11-04 | 2026-10-18 |
| CVE-2025-20358 A vulnerability in the Contact Center Express (CCX) Editor application of Cisco... |
critical | 9.8 | — | Cisco / unified contact center express | 2025-11-05 | 2026-10-18 |
| CVE-2025-45378 Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted... |
critical | 9.1 | — | Dell / cloudlink | 2025-11-05 | 2026-10-18 |
| CVE-2025-34299 Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthe... |
critical | 9.8 | — | Monstaftp / monsta ftp | 2025-11-07 | 2026-10-18 |
| CVE-2025-52425 An SQL injection vulnerability has been reported to affect QuMagie. |
critical | 9.8 | — | Qnap / qumagie | 2025-11-07 | 2026-10-18 |
| CVE-2025-12916 A vulnerability was determined in Sangfor Operation and Maintenance Security Man... |
critical | 9.8 | — | Sangfor / operation and maintenance security management system | 2025-11-09 | 2026-10-18 |
| CVE-2025-11892 An improper neutralization of input vulnerability was identified in GitHub Enter... |
critical | 9.6 | — | Github / enterprise server | 2025-11-10 | 2026-10-18 |
| CVE-2025-58360 OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerabil... |
critical | 9.8 | Listed | OSGeo / GeoServer | 2025-11-25 | 2026-10-18 |
| CVE-2025-64446 Fortinet FortiWeb Path Traversal Vulnerability |
critical | 9.8 | Listed | Fortinet / FortiWeb | 2025-11-14 | 2026-10-18 |
| CVE-2025-13057 A vulnerability was identified in Campcodes School Fees Payment Management Syste... |
critical | 9.8 | — | Campcodes / school fees payment management system | 2025-11-12 | 2026-10-18 |
| CVE-2025-13059 A weakness has been identified in SourceCodester Alumni Management System 1.0. |
critical | 9.8 | — | Oretnom23 / alumni management system | 2025-11-12 | 2026-10-18 |
| CVE-2025-13060 A security vulnerability has been detected in SourceCodester Survey Application... |
critical | 9.8 | — | Oretnom23 / survey application system | 2025-11-12 | 2026-10-18 |
| CVE-2025-13075 A vulnerability was detected in code-projects Responsive Hotel Site 1.0. |
critical | 9.8 | — | Fabian / responsive hotel site | 2025-11-12 | 2026-10-18 |
| CVE-2025-13076 A flaw has been found in code-projects Responsive Hotel Site 1.0. |
critical | 9.8 | — | Fabian / responsive hotel site | 2025-11-12 | 2026-10-18 |
| CVE-2025-59367 An authentication bypass vulnerability has been identified in certain DSL series... |
critical | 9.8 | — | Asus / dsl-ac51 firmware | 2025-11-13 | 2026-10-18 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.