October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,620
Critical
3,170
High
7,238
Medium
7,074
Low
640
Severity not reported
4,498
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (322), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-65215 Rejected reason: The reported issue could not be reproduced. |
not reported | — | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-65216 Rejected reason: The reported issue is tracked under CVE-2026-18450. |
not reported | — | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-65217 Rejected reason: The reported issue could not be reproduced. |
not reported | — | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-65218 Rejected reason: The reported issue is tracked under CVE-2026-18451. |
not reported | — | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-65221 Rejected reason: The reported issue was assessed as intended functionality. |
not reported | — | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-65222 Rejected reason: The reported issue could not be reproduced, and the affected pr... |
not reported | — | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-65226 Rejected reason: This CVE ID has been rejected by runZero as unused. |
not reported | — | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-99092 In the Linux kernel, the following vulnerability has been resolved:
riscv: patc... |
not reported | — | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-99093 In the Linux kernel, the following vulnerability has been resolved:
mm: don't s... |
not reported | — | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-99096 In the Linux kernel, the following vulnerability has been resolved:
io_uring/re... |
not reported | — | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-99097 In the Linux kernel, the following vulnerability has been resolved:
tee: shm: r... |
not reported | — | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-99098 In the Linux kernel, the following vulnerability has been resolved:
dm-integrit... |
not reported | — | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-98943 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-96581 Authorization Bypass Through User-Controlled Key vulnerability in ash-project as... |
not reported | — | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-4316 Reflected Cross-Site Scripting (XSS) in Gym Management Software IsMyGym by Zuinq... |
not reported | — | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-115627 Incorrect Authorization vulnerability in ash-project ash_postgres allows a user... |
not reported | — | — | — | 2026-10-25 | 2026-10-26 |
| CVE-2026-115635 Incorrect Authorization vulnerability in ash-project ash_postgres allows a user... |
not reported | — | — | — | 2026-10-25 | 2026-10-26 |
| CVE-2026-114214 Incorrect Authorization vulnerability in ash-project ash allows a client to read... |
not reported | — | — | — | 2026-10-25 | 2026-10-26 |
| CVE-2026-115425 Multiple cross site scripting (XSS) vulnerabilities affect OPNsense firewall ves... |
not reported | — | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-105930 When package management is enabled, Pulsar Functions, Sources and Sinks can be r... |
not reported | — | — | — | 2026-10-21 | 2026-10-26 |
| CVE-2026-103377 A reflected Cross-Site Scripting (XSS) vulnerability has been identified in the... |
not reported | — | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116164 Parse Server before 8.6.100 and 9.0.0 before 9.10.4-alpha.3 does not reject rese... |
not reported | — | — | — | 2026-10-25 | 2026-10-26 |
| CVE-2026-115586 virtualenv is a tool for creating isolated virtual python environments. |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2012-20006 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-98942 In the Linux kernel, the following vulnerability has been resolved:
sched_ext:... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98913 In the Linux kernel, the following vulnerability has been resolved:
net: thunde... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98914 In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu:... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98915 In the Linux kernel, the following vulnerability has been resolved:
media: vide... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98916 In the Linux kernel, the following vulnerability has been resolved:
wifi: nl802... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98917 In the Linux kernel, the following vulnerability has been resolved:
parisc: Inc... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98926 In the Linux kernel, the following vulnerability has been resolved:
drm/amd/dis... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98937 In the Linux kernel, the following vulnerability has been resolved:
perf/core:... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98907 In the Linux kernel, the following vulnerability has been resolved:
btrfs: prot... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98908 In the Linux kernel, the following vulnerability has been resolved:
net: microc... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98909 In the Linux kernel, the following vulnerability has been resolved:
net: cpsw_n... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98910 In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd:... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98912 In the Linux kernel, the following vulnerability has been resolved:
ALSA: seq:... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98898 In the Linux kernel, the following vulnerability has been resolved:
drm/amd/pm/... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98900 In the Linux kernel, the following vulnerability has been resolved:
xen/gntallo... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98901 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix... |
not reported | — | — | — | 2026-10-23 | 2026-10-26 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.