October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,543
Critical
3,166
High
7,218
Medium
7,051
Low
637
Severity not reported
4,471
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (322), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-118177 When looking for calendars in a directory on a server, during account setup or w... |
not reported | — | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-118178 A remote RSS feed could use the itunes:new-feed-url or newLocation element to pe... |
not reported | — | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-118179 Clicking a news: or snews: link that referenced a message-ID made Thunderbird co... |
not reported | — | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-118180 When logging in to a Matrix account, Thunderbird used the homeserver address pro... |
not reported | — | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-103594 A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configura... |
not reported | — | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-104381 A missing authentication vulnerability in Fireware OS's FireCluster state synchr... |
not reported | — | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-111107 A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management... |
not reported | — | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-112709 A heap-based buffer overflow vulnerability in the Fireware OS authentication ser... |
not reported | — | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-112710 A heap-based buffer overflow vulnerability exists in the Fireware OS authenticat... |
not reported | — | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-113881 A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access... |
not reported | — | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-115495 Cleartext Transmission of Sensitive Information vulnerability in the WatchGuard... |
not reported | — | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-82332 An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint m... |
not reported | — | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-90442 A stack-based buffer overflow vulnerability in the Fireware OS certd process all... |
not reported | — | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-90464 An external control of file path vulnerability in a WatchGuard Fireware OS firew... |
not reported | — | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-93434 An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication... |
not reported | — | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-93866 An integer overflow vulnerability in the WebSocket connection handling used by W... |
not reported | — | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-114111 sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vu... |
not reported | — | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-113654 ApostropheCMS is an open-source Node.js content management system, and sanitize-... |
not reported | — | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-93515 A use-after-free in present_clear_window_notifies() in the X.org X Server before... |
not reported | — | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-99215 In the Linux kernel, the following vulnerability has been resolved:
power: supp... |
not reported | — | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-99207 In the Linux kernel, the following vulnerability has been resolved:
scsi: targe... |
not reported | — | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-99208 In the Linux kernel, the following vulnerability has been resolved:
drm/xe/oa:... |
not reported | — | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-99209 In the Linux kernel, the following vulnerability has been resolved:
drm/xe: ski... |
not reported | — | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-99210 In the Linux kernel, the following vulnerability has been resolved:
accel/rocke... |
not reported | — | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-99199 In the Linux kernel, the following vulnerability has been resolved:
net: hisili... |
not reported | — | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-99200 In the Linux kernel, the following vulnerability has been resolved:
net: hisili... |
not reported | — | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-99205 In the Linux kernel, the following vulnerability has been resolved:
sched/core:... |
not reported | — | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-99193 In the Linux kernel, the following vulnerability has been resolved:
net: ti: ic... |
not reported | — | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-99194 In the Linux kernel, the following vulnerability has been resolved:
net: ethern... |
not reported | — | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-99195 In the Linux kernel, the following vulnerability has been resolved:
net: ethoc:... |
not reported | — | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-99196 In the Linux kernel, the following vulnerability has been resolved:
net: au1000... |
not reported | — | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-99197 In the Linux kernel, the following vulnerability has been resolved:
net: mv643x... |
not reported | — | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-99198 In the Linux kernel, the following vulnerability has been resolved:
net: ethern... |
not reported | — | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-99183 In the Linux kernel, the following vulnerability has been resolved:
accel/rocke... |
not reported | — | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-99184 In the Linux kernel, the following vulnerability has been resolved:
accel/rocke... |
not reported | — | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-99186 In the Linux kernel, the following vulnerability has been resolved:
x86/insn-ev... |
not reported | — | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-99188 In the Linux kernel, the following vulnerability has been resolved:
net: stmmac... |
not reported | — | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-99189 In the Linux kernel, the following vulnerability has been resolved:
gpio: mxc:... |
not reported | — | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-99168 In the Linux kernel, the following vulnerability has been resolved:
mshv_vtl: C... |
not reported | — | — | — | 2026-10-28 | 2026-10-28 |
| CVE-2026-99172 In the Linux kernel, the following vulnerability has been resolved:
ipc: drop t... |
not reported | — | — | — | 2026-10-28 | 2026-10-28 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.