October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,337
Critical
3,273
High
7,854
Medium
7,530
Low
728
Severity not reported
4,952
In CISA KEV
190
Most affected vendors (by CPE data where available): microsoft (1401), google (814), linux (722), ibm (323), oracle (193), mozilla (182), adobe (156), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2025-45378 Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted... |
critical | 9.1 | — | Dell / cloudlink | 2025-11-05 | 2026-10-18 |
| CVE-2025-34299 Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthe... |
critical | 9.8 | — | Monstaftp / monsta ftp | 2025-11-07 | 2026-10-18 |
| CVE-2025-52425 An SQL injection vulnerability has been reported to affect QuMagie. |
critical | 9.8 | — | Qnap / qumagie | 2025-11-07 | 2026-10-18 |
| CVE-2025-12916 A vulnerability was determined in Sangfor Operation and Maintenance Security Man... |
critical | 9.8 | — | Sangfor / operation and maintenance security management system | 2025-11-09 | 2026-10-18 |
| CVE-2025-11892 An improper neutralization of input vulnerability was identified in GitHub Enter... |
critical | 9.6 | — | Github / enterprise server | 2025-11-10 | 2026-10-18 |
| CVE-2025-58360 OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerabil... |
critical | 9.8 | Listed | OSGeo / GeoServer | 2025-11-25 | 2026-10-18 |
| CVE-2025-64446 Fortinet FortiWeb Path Traversal Vulnerability |
critical | 9.8 | Listed | Fortinet / FortiWeb | 2025-11-14 | 2026-10-18 |
| CVE-2025-13057 A vulnerability was identified in Campcodes School Fees Payment Management Syste... |
critical | 9.8 | — | Campcodes / school fees payment management system | 2025-11-12 | 2026-10-18 |
| CVE-2025-13059 A weakness has been identified in SourceCodester Alumni Management System 1.0. |
critical | 9.8 | — | Oretnom23 / alumni management system | 2025-11-12 | 2026-10-18 |
| CVE-2025-13060 A security vulnerability has been detected in SourceCodester Survey Application... |
critical | 9.8 | — | Oretnom23 / survey application system | 2025-11-12 | 2026-10-18 |
| CVE-2025-13075 A vulnerability was detected in code-projects Responsive Hotel Site 1.0. |
critical | 9.8 | — | Fabian / responsive hotel site | 2025-11-12 | 2026-10-18 |
| CVE-2025-13076 A flaw has been found in code-projects Responsive Hotel Site 1.0. |
critical | 9.8 | — | Fabian / responsive hotel site | 2025-11-12 | 2026-10-18 |
| CVE-2025-59367 An authentication bypass vulnerability has been identified in certain DSL series... |
critical | 9.8 | — | Asus / dsl-ac51 firmware | 2025-11-13 | 2026-10-18 |
| CVE-2025-12762 pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnera... |
critical | 9.8 | — | Pgadmin / pgadmin 4 | 2025-11-13 | 2026-10-18 |
| CVE-2025-64741 Improper authorization handling in Zoom Workplace for Android before version 6.5... |
critical | 9.8 | — | Zoom / meeting software development kit | 2025-11-13 | 2026-10-18 |
| CVE-2025-13123 A flaw has been found in AMTT Hotel Broadband Operation System 1.0. |
critical | 9.8 | — | Amttgroup / hibos | 2025-11-13 | 2026-10-18 |
| CVE-2025-64709 Typebot is an open-source chatbot builder. |
critical | 9.9 | — | Typebot / typebot | 2025-11-13 | 2026-10-18 |
| CVE-2025-36236 IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM... |
critical | 9.1 | — | Ibm / vios | 2025-11-13 | 2026-10-18 |
| CVE-2025-36250 IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM... |
critical | 9.8 | — | Ibm / vios | 2025-11-13 | 2026-10-18 |
| CVE-2025-36251 IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementat... |
critical | 9.8 | — | Ibm / vios | 2025-11-13 | 2026-10-18 |
| CVE-2025-13189 A vulnerability has been found in D-Link DIR-816L 2_06_b09_beta. |
critical | 9.8 | — | Dlink / dir-816l firmware | 2025-11-15 | 2026-10-18 |
| CVE-2025-13191 A vulnerability was determined in D-Link DIR-816L 2_06_b09_beta. |
critical | 9.8 | — | Dlink / dir-816l firmware | 2025-11-15 | 2026-10-18 |
| CVE-2025-13233 A vulnerability has been found in itsourcecode Inventory Management System 1.0. |
critical | 9.8 | — | Janobe / inventory management system | 2025-11-16 | 2026-10-18 |
| CVE-2025-13234 A vulnerability was found in itsourcecode Inventory Management System 1.0. |
critical | 9.8 | — | Janobe / inventory management system | 2025-11-16 | 2026-10-18 |
| CVE-2025-13235 A vulnerability was determined in itsourcecode Inventory Management System 1.0. |
critical | 9.8 | — | Janobe / inventory management system | 2025-11-16 | 2026-10-18 |
| CVE-2025-13236 A vulnerability was identified in itsourcecode Inventory Management System 1.0. |
critical | 9.8 | — | Janobe / inventory management system | 2025-11-16 | 2026-10-18 |
| CVE-2025-13237 A security flaw has been discovered in itsourcecode Inventory Management System... |
critical | 9.8 | — | Janobe / inventory management system | 2025-11-16 | 2026-10-18 |
| CVE-2025-13240 A vulnerability was detected in code-projects Student Information System 2.0. |
critical | 9.8 | — | Fabian / student information system | 2025-11-16 | 2026-10-18 |
| CVE-2025-13241 A flaw has been found in code-projects Student Information System 2.0. |
critical | 9.8 | — | Fabian / student information system | 2025-11-16 | 2026-10-18 |
| CVE-2025-13242 A vulnerability has been found in code-projects Student Information System 2.0. |
critical | 9.8 | — | Fabian / student information system | 2025-11-16 | 2026-10-18 |
| CVE-2025-13248 A weakness has been identified in SourceCodester Patients Waiting Area Queue Man... |
critical | 9.8 | — | Pamzey / patients waiting area queue management system | 2025-11-16 | 2026-10-18 |
| CVE-2025-13305 A weakness has been identified in D-Link DWR-M920, DWR-M921, DWR-M960, DIR-822K... |
critical | 9.8 | — | Dlink / dir-825m firmware | 2025-11-17 | 2026-10-18 |
| CVE-2025-13323 A security flaw has been discovered in code-projects Simple Pizza Ordering Syste... |
critical | 9.8 | — | Carmelo / simple pizza ordering system | 2025-11-18 | 2026-10-18 |
| CVE-2025-41346 Faulty authorization control in software WinPlus v24.11.27 by Informática del Es... |
critical | 9.8 | — | Iest / winplus | 2025-11-18 | 2026-10-18 |
| CVE-2025-41347 Unlimited upload vulnerability for dangerous file types in WinPlus v24.11.27 fro... |
critical | 9.8 | — | Iest / winplus | 2025-11-18 | 2026-10-18 |
| CVE-2025-13344 A weakness has been identified in SourceCodester Train Station Ticketing System... |
critical | 9.8 | — | Oretnom23 / train station ticketing system | 2025-11-18 | 2026-10-18 |
| CVE-2025-41348 SQL injection vulnerability in WinPlus v24.11.27 by Informática del Este. |
critical | 9.8 | — | Iest / winplus | 2025-11-18 | 2026-10-18 |
| CVE-2025-64325 Emby Server is a personal media server. |
critical | 9.0 | — | Emby / emby | 2025-11-18 | 2026-10-18 |
| CVE-2025-13396 A weakness has been identified in code-projects Courier Management System 1.0. |
critical | 9.8 | — | Carmelogarcia / courier management system | 2025-11-19 | 2026-10-18 |
| CVE-2025-13400 A vulnerability was detected in Tenda CH22 1.0.0.1. |
critical | 9.8 | — | Tenda / ch22 firmware | 2025-11-19 | 2026-10-18 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.