October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
23,316
Critical
3,226
High
7,610
Medium
7,220
Low
656
Severity not reported
4,604
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1426), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-104853 Nx is a monorepo solution for TypeScript and polyglot codebases. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-104854 Nx is a monorepo solution for TypeScript and polyglot codebases. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-59665 Cross-Site Scripting vulnerability in the Repasat application. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-59672 Cross-Site Scripting vulnerability in the Repasat application. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-59673 Cross-Site Scripting vulnerability in the Repasat application. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-59666 Cross-Site Scripting vulnerability in the Repasat application. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-59667 Cross-Site Scripting vulnerability in the Repasat application. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-59668 Cross-Site Scripting vulnerability in the Repasat application. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-104733 User Impersonation in ProcessOnes XMMP Server ejabberd <= 26.04 allows an attack... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-104721 Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-cla... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-27872 - Improper Privilege Management vulnerability in Johnson Controls Easy IO FG all... |
not reported | — | — | — | 2026-10-01 | 2026-10-02 |
| CVE-2026-94635 Allocation of resources without limits or throttling, Improper handling of lengt... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-94650 Uncontrolled Recursion vulnerability in Apache Thrift c_glib bindings. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-96294 Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-85483 Use of uninitialized resource, Return of wrong status code vulnerability in Apac... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-85493 Uncontrolled Recursion vulnerability in Apache Thrift Dart and Java ME bindings. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-66081 Access of Uninitialized Pointer vulnerability in Apache Thrift c_glib bindings. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-66837 Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apa... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-66858 The protocol skip routine in several Apache Thrift bindings did not apply the bi... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-66859 NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-83632 Allocation of resources without limits or throttling, Integer overflow or wrapar... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-55224 MineAdmin is a ready-to-use backend management system suitable for quickly build... |
not reported | — | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-104908 MISP contains an improper input validation vulnerability in the decaying model i... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-104900 MISP contains a stored cross-site scripting (XSS) vulnerability in the index tab... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-104901 MISP contains a cross-site scripting (XSS) vulnerability in the ID Translator fe... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-104906 MISP contains a cross-site scripting (XSS) vulnerability in the TAXII object vie... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-104907 MISP contains a cross-site scripting (XSS) vulnerability in the remote event pre... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-96288 Uncontrolled Recursion, Allocation of resources without limits or throttling vul... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-86537 Uncaught exception, Loop with unreachable exit condition ('infinite loop'), Inte... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-14983 Missing authentication in the web interface in Teledyne FLIR Aware2 versions thr... |
not reported | — | — | — | 2026-10-01 | 2026-10-02 |
| CVE-2026-14984 Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2... |
not reported | — | — | — | 2026-10-01 | 2026-10-02 |
| CVE-2026-55393 Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions thro... |
not reported | — | — | — | 2026-10-01 | 2026-10-02 |
| CVE-2026-55394 Unencrypted traffic in the 802.11 network of Teledyne FLIR Aware2 versions throu... |
not reported | — | — | — | 2026-10-01 | 2026-10-02 |
| CVE-2026-55395 Hardcoded passwords in the access control in Teledyne FLIR Aware2 versions throu... |
not reported | — | — | — | 2026-10-01 | 2026-10-02 |
| CVE-2026-55396 Cleartext transmission without a cryptographic integrity check in operator contr... |
not reported | — | — | — | 2026-10-01 | 2026-10-02 |
| CVE-2026-94634 Allocation of resources without limits or throttling, Initialization of a resour... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-91137 Improper validation of specified quantity in input, Allocation of resources with... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-93925 Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-93926 Missing release of memory after effective lifetime, Missing release of resource... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-94633 Memory allocation with excessive size value, Improper handling of length paramet... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.