October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,026
Critical
3,238
High
7,710
Medium
7,366
Low
728
Severity not reported
4,984
In CISA KEV
190
Most affected vendors (by CPE data where available): microsoft (1401), google (804), linux (702), ibm (323), oracle (182), mozilla (182), adobe (155), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-27872 - Improper Privilege Management vulnerability in Johnson Controls Easy IO FG all... |
not reported | — | — | — | 2026-10-01 | 2026-10-02 |
| CVE-2026-94635 Allocation of resources without limits or throttling, Improper handling of lengt... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-94650 Uncontrolled Recursion vulnerability in Apache Thrift c_glib bindings. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-96294 Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-85483 Use of uninitialized resource, Return of wrong status code vulnerability in Apac... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-85493 Uncontrolled Recursion vulnerability in Apache Thrift Dart and Java ME bindings. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-66081 Access of Uninitialized Pointer vulnerability in Apache Thrift c_glib bindings. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-66837 Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apa... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-66858 The protocol skip routine in several Apache Thrift bindings did not apply the bi... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-66859 NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-83632 Allocation of resources without limits or throttling, Integer overflow or wrapar... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-55224 MineAdmin is a ready-to-use backend management system suitable for quickly build... |
not reported | — | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-104908 MISP contains an improper input validation vulnerability in the decaying model i... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-104900 MISP contains a stored cross-site scripting (XSS) vulnerability in the index tab... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-104901 MISP contains a cross-site scripting (XSS) vulnerability in the ID Translator fe... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-104906 MISP contains a cross-site scripting (XSS) vulnerability in the TAXII object vie... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-104907 MISP contains a cross-site scripting (XSS) vulnerability in the remote event pre... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-96288 Uncontrolled Recursion, Allocation of resources without limits or throttling vul... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-86537 Uncaught exception, Loop with unreachable exit condition ('infinite loop'), Inte... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-14983 Missing authentication in the web interface in Teledyne FLIR Aware2 versions thr... |
not reported | — | — | — | 2026-10-01 | 2026-10-02 |
| CVE-2026-14984 Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2... |
not reported | — | — | — | 2026-10-01 | 2026-10-02 |
| CVE-2026-55393 Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions thro... |
not reported | — | — | — | 2026-10-01 | 2026-10-02 |
| CVE-2026-55394 Unencrypted traffic in the 802.11 network of Teledyne FLIR Aware2 versions throu... |
not reported | — | — | — | 2026-10-01 | 2026-10-02 |
| CVE-2026-55395 Hardcoded passwords in the access control in Teledyne FLIR Aware2 versions throu... |
not reported | — | — | — | 2026-10-01 | 2026-10-02 |
| CVE-2026-55396 Cleartext transmission without a cryptographic integrity check in operator contr... |
not reported | — | — | — | 2026-10-01 | 2026-10-02 |
| CVE-2026-94634 Allocation of resources without limits or throttling, Initialization of a resour... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-91137 Improper validation of specified quantity in input, Allocation of resources with... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-93925 Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-93926 Missing release of memory after effective lifetime, Missing release of resource... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-94633 Memory allocation with excessive size value, Improper handling of length paramet... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-90440 Uncaught exception, improper handling of exceptional conditions, improper resour... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-92834 Use of uninitialized resource, Return of wrong status code vulnerability in Apac... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-94646 Uncaught exception, Improper validation of specified quantity in input, Improper... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-96277 Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-96286 Uncaught exception vulnerability in Apache Thrift Perl bindings. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-96289 Uncontrolled Recursion vulnerability in Apache Thrift PHP bindings. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-51936 Zetetic SQLCipher before 4.15.0 allows SQL injection. |
not reported | — | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-102937 virtualenv is a tool for creating isolated virtual python environments. |
not reported | — | — | — | 2026-09-29 | 2026-10-02 |
| CVE-2026-102757 An unprivileged, memory-protected ThreadX module can have the kernel read and wr... |
not reported | — | — | — | 2026-09-29 | 2026-10-02 |
| CVE-2026-14157 Use of an Externally Controlled Format String in the ASUS Router modules allow a... |
not reported | — | — | — | 2026-10-01 | 2026-10-02 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.