October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,034
Critical
3,238
High
7,713
Medium
7,372
Low
727
Severity not reported
4,984
In CISA KEV
190
Most affected vendors (by CPE data where available): microsoft (1401), google (804), linux (709), ibm (323), oracle (187), mozilla (182), adobe (155), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-105768 apko allows users to build and publish OCI container images built from apk packa... |
not reported | — | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-73975 djehuty is a research data repository system developed by 4TU.ResearchData. |
not reported | — | — | — | 2026-10-01 | 2026-10-06 |
| CVE-2026-103923 KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the we... |
not reported | — | — | — | 2026-10-01 | 2026-10-06 |
| CVE-2026-70650 GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the... |
not reported | — | — | — | 2026-10-01 | 2026-10-05 |
| CVE-2026-105214 Zitadel before 4.16.2 contains a server-side request forgery vulnerability that... |
not reported | — | — | — | 2026-10-04 | 2026-10-05 |
| CVE-2026-104859 Nx is a monorepo solution for TypeScript and polyglot codebases. |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-105632 Plane is an open-source project management tool. |
not reported | — | — | — | 2026-10-05 | 2026-10-05 |
| CVE-2026-104968 Plane is an open-source project management tool. |
not reported | — | — | — | 2026-10-05 | 2026-10-05 |
| CVE-2026-79701 Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass in Module Con... |
not reported | — | — | — | 2026-09-14 | 2026-10-05 |
| CVE-2026-96990 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-94652 Missing release of memory after effective lifetime vulnerability in Apache Thrif... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-94653 Inefficient Algorithmic Complexity vulnerability in Apache Thrift PHP bindings. |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-94639 improper handling of exceptional conditions, Allocation of resources without lim... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-94642 Uncaught exception vulnerability in Apache Thrift PHP bindings. |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-94644 Allocation of resources without limits or throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-94645 Improper validation of specified quantity in input, Allocation of resources with... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-94637 Improper handling of highly compressed data (data amplification) vulnerability i... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-94638 Allocation of resources without limits or throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-94648 Allocation of resources without limits or throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-59659 Cross-Site Scripting vulnerability in the Repasat application. |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-59660 Cross-Site Scripting vulnerability in the Repasat application. |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-59661 Cross-Site Scripting vulnerability in the Repasat application. |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-61373 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-104892 Plane is an open-source project management tool. |
not reported | — | — | — | 2026-10-05 | 2026-10-05 |
| CVE-2026-56738 phpMyFAQ is an open source FAQ web application. |
not reported | — | — | — | 2026-09-24 | 2026-10-05 |
| CVE-2026-92882 Insufficiently protected credentials in the host and folder configuration endpoi... |
not reported | — | — | — | 2026-09-22 | 2026-10-05 |
| CVE-2026-93495 Improper initialization in an ASUS certain motherboard allows an physically prox... |
not reported | — | — | — | 2026-10-01 | 2026-10-05 |
| CVE-2026-66331 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-03 |
| CVE-2026-61374 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-03 |
| CVE-2026-63772 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-03 |
| CVE-2026-66054 Allocation of Resources Without Limits or Throttling, Improper Handling of Highl... |
not reported | — | — | — | 2026-10-02 | 2026-10-03 |
| CVE-2026-66055 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-03 |
| CVE-2026-104912 MISP contains an authorization flaw in its correlation handling during attribute... |
not reported | — | — | — | 2026-10-02 | 2026-10-03 |
| CVE-2026-104910 MISP contains an authorization bypass in the related events listing functionalit... |
not reported | — | — | — | 2026-10-02 | 2026-10-03 |
| CVE-2026-97507 In the Linux kernel, the following vulnerability has been resolved:
media: dm11... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97510 In the Linux kernel, the following vulnerability has been resolved:
thunderbolt... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97516 In the Linux kernel, the following vulnerability has been resolved:
wifi: rtw88... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97517 In the Linux kernel, the following vulnerability has been resolved:
wifi: nl802... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97490 In the Linux kernel, the following vulnerability has been resolved:
affs: handl... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97491 In the Linux kernel, the following vulnerability has been resolved:
net/rds: Do... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.