Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

October 2026 CVE archive

Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.

Published in October 2026Materially updated (Critical / KEV)
Total records
24,596
Critical
3,297
High
7,980
Medium
7,645
Low
740
Severity not reported
4,934
In CISA KEV
191

Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-99108
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix F...
not reported— —— 2026-10-282026-10-28
CVE-2026-99111
In the Linux kernel, the following vulnerability has been resolved: smb: client...
not reported— —— 2026-10-282026-10-28
CVE-2026-99101
In the Linux kernel, the following vulnerability has been resolved: ntfs: move...
not reported— —— 2026-10-282026-10-28
CVE-2026-99102
In the Linux kernel, the following vulnerability has been resolved: ntfs: take...
not reported— —— 2026-10-282026-10-28
CVE-2026-99104
In the Linux kernel, the following vulnerability has been resolved: sched_ext:...
not reported— —— 2026-10-282026-10-28
CVE-2026-117853
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117854
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117855
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117856
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117857
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117858
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117837
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117838
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117839
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117840
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117841
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117842
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117843
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117844
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117845
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117846
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117847
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117848
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117849
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117850
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117851
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117852
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117821
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117822
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117823
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117824
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117825
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117826
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117827
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117828
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117829
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117830
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117831
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117832
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117833
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.