October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,384
Critical
3,278
High
7,871
Medium
7,568
Low
735
Severity not reported
4,932
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1401), google (814), linux (722), ibm (323), oracle (193), mozilla (182), adobe (156), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-97851 The storage status-change REST service allows location records still associated... |
critical | 9.1 | — | — | 2026-10-16 | 2026-10-16 |
| CVE-2026-85818 Improper verification of cryptographic signature in Windows Schannel allows an u... |
critical | 9.0 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-16 |
| CVE-2026-78802 An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (... |
critical | 9.8 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-78799 Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing)... |
critical | 9.8 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-37107 An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via th... |
critical | 9.8 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-52394 DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input. |
critical | 9.1 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-104585 Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /... |
critical | 9.8 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-110392 Improper neutralization of special elements used in an OS command ('OS command i... |
critical | 9.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-108065 SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpo... |
critical | 9.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-110911 Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted valu... |
critical | 9.8 | — | — | 2026-10-15 | 2026-10-16 |
| CVE-2026-95182 An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attack... |
critical | 10.0 | — | — | 2026-10-16 | 2026-10-16 |
| CVE-2026-66086 In the modem OTA stack, there is a possible stack-based buffer overflow due to i... |
critical | 9.8 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-109575 In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edit... |
critical | 9.8 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-87689 The Metasploit Framework Web Service REST API (msf-ws) exposes the credential st... |
critical | 9.8 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-84731 An unauthenticated remote attacker can bypass authentication and gain full acces... |
critical | 9.8 | — | — | 2026-10-15 | 2026-10-16 |
| CVE-2026-85806 Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-85809 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-96924 Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-85814 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unaut... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-108551 openapi-typescript-codegen through 0.31.0 contains a code injection vulnerabilit... |
critical | 9.8 | — | — | 2026-10-10 | 2026-10-16 |
| CVE-2026-111094 In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 remote code execution... |
critical | 9.8 | — | Jetbrains / teamcity | 2026-10-15 | 2026-10-16 |
| CVE-2026-108598 Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateE... |
critical | 9.8 | — | — | 2026-10-10 | 2026-10-16 |
| CVE-2026-108753 Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability... |
critical | 9.4 | — | — | 2026-10-11 | 2026-10-16 |
| CVE-2026-108860 BotSharp through 5.2.0 contains an authentication bypass vulnerability that allo... |
critical | 9.1 | — | — | 2026-10-11 | 2026-10-16 |
| CVE-2026-110116 Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversa... |
critical | 9.1 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-110612 vlife through 2.0.1 contains an authentication bypass vulnerability that allows... |
critical | 9.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-110634 git-diff before 2.0.7 contains an OS command injection vulnerability that allows... |
critical | 9.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-110639 @mborne/extract before 0.2.1 contains an OS command injection vulnerability that... |
critical | 9.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-110644 nodejs-whisper through 0.3.1 contains an OS command injection vulnerability in c... |
critical | 9.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-110649 Stills before 25.24.2 contains an OS command injection vulnerability that allows... |
critical | 9.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-110812 Deserialization of untrusted data in the Gremlin graph data import component in... |
critical | 9.9 | — | — | 2026-10-15 | 2026-10-16 |
| CVE-2026-70024 Stack-based buffer overflow in Windows Internet Information Services allows an u... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-110638 doc-recog through 1.1.6 contains an OS command injection vulnerability that allo... |
critical | 9.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-110643 transcribe2texts through 1.0.6 contains an OS command injection vulnerability th... |
critical | 9.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-109439 Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8.1.0.0 cont... |
critical | 9.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-85792 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-10-13 | 2026-10-16 |
| CVE-2026-49950 Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulner... |
critical | 9.8 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-110862 Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vu... |
critical | 9.1 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-111329 JuggleIM im-server through 1.8.16 ships default administrator credentials admin/... |
critical | 9.8 | — | — | 2026-10-15 | 2026-10-16 |
| CVE-2026-92116 OAuth1 callback validation vulnerability in Apache Allura. |
critical | 9.1 | — | — | 2026-10-12 | 2026-10-16 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.