October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,064
Critical
3,133
High
7,120
Medium
6,940
Low
617
Severity not reported
4,254
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-81160 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripti... |
medium | 6.1 | — | Slick Carousel Project / slick carousel | 2026-09-02 | 2026-10-01 |
| CVE-2026-82300 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial... |
medium | 6.5 | — | Elastic / elasticsearch | 2026-09-26 | 2026-10-01 |
| CVE-2026-86610 The Download Manager WordPress plugin before 3.3.71 does not sufficiently saniti... |
medium | 6.4 | — | — | 2026-10-01 | 2026-10-01 |
| CVE-2026-87970 The If-So Dynamic Content WordPress plugin before 1.10.2 does not escape a reque... |
medium | 4.7 | — | — | 2026-10-01 | 2026-10-01 |
| CVE-2026-90972 The WP Fusion Lite WordPress plugin before 3.48.0 does not perform a capability... |
medium | 5.4 | — | — | 2026-10-01 | 2026-10-01 |
| CVE-2026-90974 The WP Fusion Lite WordPress plugin before 3.48.0 does not require authenticatio... |
medium | 6.5 | — | — | 2026-10-01 | 2026-10-01 |
| CVE-2026-96173 The Payments for Hubtel WordPress plugin before 1.0.2 does not verify that the r... |
medium | 5.3 | — | — | 2026-10-01 | 2026-10-01 |
| CVE-2026-96200 The Payments for Hubtel WordPress plugin before 1.0.2 does not verify that payme... |
medium | 5.3 | — | — | 2026-10-01 | 2026-10-01 |
| CVE-2026-93460 A stored cross-site scripting vulnerability via appended strings in email form f... |
medium | 5.4 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-93462 A missing authentication for critical function vulnerability exists in baserCMS. |
medium | 5.3 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-93464 A stored cross-site scripting vulnerability via custom content descriptions exis... |
medium | 5.4 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-84062 BurgerEditor 3.0.0 through 3.4.0 contains an issue with authorization bypass thr... |
medium | 4.3 | — | — | 2026-09-10 | 2026-10-01 |
| CVE-2026-84063 BurgerEditor 3.2.0 through 3.4.0 contains an issue with unrestricted upload of f... |
medium | 6.5 | — | — | 2026-09-10 | 2026-10-01 |
| CVE-2026-95327 Information leak in Networking in Google Chrome prior to 154.0.8037.57 allowed a... |
medium | 6.5 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-76729 A format string vulnerability in the API endpoint of HPE Networking Instant ON A... |
medium | 6.6 | — | — | 2026-09-29 | 2026-10-01 |
| CVE-2026-76732 A local privilege-escalation vulnerability has been discovered in the affected d... |
medium | 6.4 | — | — | 2026-09-29 | 2026-10-01 |
| CVE-2026-47565 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode... |
medium | 6.4 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47543 VIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the k... |
medium | 6.7 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47544 NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel... |
medium | 6.7 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47546 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the... |
medium | 6.7 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47547 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the... |
medium | 6.7 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47537 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode... |
medium | 6.7 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47538 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the... |
medium | 6.7 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47539 NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel... |
medium | 6.7 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47542 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the... |
medium | 6.7 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47532 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the... |
medium | 6.7 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47533 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the... |
medium | 6.7 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47518 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a se... |
medium | 6.0 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47522 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the... |
medium | 6.7 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47515 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the... |
medium | 6.7 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47509 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the... |
medium | 6.7 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-101881 OpenClaw Windows Node before 2026.7.1 contains an allocation of resources withou... |
medium | 6.5 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-103387 A weakness has been identified in garycourt uri-js up to 4.4.1. |
medium | 4.3 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-116554 A flaw has been found in Argilla up to 2.8.0. |
low | 3.5 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-116482 A vulnerability has been found in subhajitkhan online-clinic-management-system u... |
low | 3.5 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-116215 MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Car... |
low | 3.1 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-116227 A vulnerability has been found in Edimax BR-6208AC 1.32. |
low | 2.4 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-107308 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripti... |
low | 3.1 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-107309 Missing Authorization vulnerability in Drupal Easy Breadcrumb allows Forceful Br... |
low | 3.7 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-107311 Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Per... |
low | 3.7 | — | — | 2026-10-30 | 2026-10-30 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.