October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,583
Critical
3,295
High
7,975
Medium
7,639
Low
740
Severity not reported
4,934
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-77467 Lychee is a free, open-source photo-management tool. |
not reported | — | — | — | 2026-10-15 | 2026-10-20 |
| CVE-2026-54701 Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code... |
not reported | — | — | — | 2026-10-14 | 2026-10-20 |
| CVE-2026-110851 n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in t... |
not reported | — | — | — | 2026-10-14 | 2026-10-20 |
| CVE-2026-110841 n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat... |
not reported | — | — | — | 2026-10-14 | 2026-10-20 |
| CVE-2026-110846 n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the wa... |
not reported | — | — | — | 2026-10-14 | 2026-10-20 |
| CVE-2026-82402 Gogs is an open source self-hosted Git service. |
not reported | — | — | — | 2026-10-14 | 2026-10-20 |
| CVE-2026-101896 Angular is a development platform for building mobile and desktop web applicatio... |
not reported | — | — | — | 2026-10-14 | 2026-10-20 |
| CVE-2026-102756 DataEase is an open source data visualization and analysis tool. |
not reported | — | — | — | 2026-10-14 | 2026-10-20 |
| CVE-2026-100406 dbt enables data analysts and engineers to transform their data using the same p... |
not reported | — | — | — | 2026-10-14 | 2026-10-20 |
| CVE-2026-56714 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-57512 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-57513 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-57514 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-57515 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-57519 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-57526 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-57528 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-57529 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112768 Parse Server before 8.6.99 and 9.0.0 before 9.10.3-alpha.2 evaluates checks agai... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2023-42991 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2023-42992 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2023-42993 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2023-42994 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2023-42995 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2023-42996 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2023-42997 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2023-42998 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2023-42999 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2023-42990 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2025-12768 A security issue exists within FactoryTalk® Historian Machine Edition. |
not reported | — | — | — | 2026-09-01 | 2026-10-19 |
| CVE-2025-7062 A stored cross-site scripting (XSS) vulnerability has been identified in the H5P... |
not reported | — | — | — | 2026-09-09 | 2026-10-19 |
| CVE-2025-3271 Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS |
not reported | — | — | — | 2026-09-09 | 2026-10-19 |
| CVE-2025-64391 This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged... |
not reported | — | — | — | 2026-10-07 | 2026-10-19 |
| CVE-2025-64392 This vulnerability in Veeam Backup Enterprise Manager allows an attacker to exec... |
not reported | — | — | — | 2026-10-07 | 2026-10-19 |
| CVE-2025-58771 AMI APTIOV contains vulnerabilities in BIOS
where users may cause “Integer Overf... |
not reported | — | — | — | 2026-10-13 | 2026-10-19 |
| CVE-2025-29895 A NULL pointer dereference vulnerability has been reported to affect Qsync Centr... |
not reported | — | — | — | 2026-10-15 | 2026-10-19 |
| CVE-2025-29896 A NULL pointer dereference vulnerability has been reported to affect Qsync Centr... |
not reported | — | — | — | 2026-10-15 | 2026-10-19 |
| CVE-2025-29897 A buffer copy without checking size of input vulnerability has been reported to... |
not reported | — | — | — | 2026-10-15 | 2026-10-19 |
| CVE-2025-68403 An external control of system or configuration setting vulnerability has been re... |
not reported | — | — | — | 2026-10-15 | 2026-10-19 |
| CVE-2025-68404 A time-of-check time-of-use (toctou) race condition vulnerability has been repor... |
not reported | — | — | — | 2026-10-15 | 2026-10-19 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.