October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,479
Critical
3,285
High
7,907
Medium
7,598
Low
740
Severity not reported
4,949
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2025-11070 A vulnerability was identified in Projectworlds Online Shopping System 1.0. |
critical | 9.8 | — | Projectworlds / online shopping system | 2025-09-27 | 2026-10-09 |
| CVE-2025-11074 A flaw has been found in code-projects Project Monitoring System 1.0. |
critical | 9.8 | — | Fabian / project monitoring system | 2025-09-27 | 2026-10-09 |
| CVE-2025-11075 A vulnerability has been found in Campcodes Online Learning Management System 1.... |
critical | 9.8 | — | Campcodes / online learning management system | 2025-09-27 | 2026-10-09 |
| CVE-2025-11076 A vulnerability was found in Campcodes Online Learning Management System 1.0. |
critical | 9.8 | — | Campcodes / online learning management system | 2025-09-27 | 2026-10-09 |
| CVE-2025-11077 A vulnerability was determined in Campcodes Online Learning Management System 1.... |
critical | 9.8 | — | Campcodes / online learning management system | 2025-09-27 | 2026-10-09 |
| CVE-2025-11079 A security flaw has been discovered in Campcodes Farm Management System 1.0. |
critical | 9.8 | — | Campcodes / farm management system | 2025-09-27 | 2026-10-09 |
| CVE-2025-11089 A vulnerability was determined in kidaze CourseSelectionSystem up to 42cd892b40a... |
critical | 9.8 | — | Kidaze / courseselectionsystem | 2025-09-28 | 2026-10-09 |
| CVE-2025-11094 A security vulnerability has been detected in code-projects E-Commerce Website 1... |
critical | 9.8 | — | Fabian / e-commerce site | 2025-09-28 | 2026-10-09 |
| CVE-2025-11101 A security flaw has been discovered in itsourcecode Open Source Job Portal 1.0. |
critical | 9.8 | — | Angeljudesuarez / open source job portal | 2025-09-28 | 2026-10-09 |
| CVE-2025-11102 A weakness has been identified in Campcodes Online Learning Management System 1.... |
critical | 9.8 | — | Campcodes / online learning management system | 2025-09-28 | 2026-10-09 |
| CVE-2025-11105 A flaw has been found in code-projects Simple Scheduling System 1.0. |
critical | 9.8 | — | Fabian / simple scheduling system | 2025-09-28 | 2026-10-09 |
| CVE-2025-11106 A vulnerability has been found in code-projects Simple Scheduling System 1.0. |
critical | 9.8 | — | Fabian / simple scheduling system | 2025-09-28 | 2026-10-09 |
| CVE-2025-11107 A vulnerability was found in code-projects Simple Scheduling System 1.0. |
critical | 9.8 | — | Fabian / simple scheduling system | 2025-09-28 | 2026-10-09 |
| CVE-2025-11108 A vulnerability was determined in code-projects Simple Scheduling System 1.0. |
critical | 9.8 | — | Fabian / simple scheduling system | 2025-09-28 | 2026-10-09 |
| CVE-2025-11109 A vulnerability was identified in Campcodes Computer Sales and Inventory System... |
critical | 9.8 | — | Campcodes / computer sales and inventory system | 2025-09-28 | 2026-10-09 |
| CVE-2025-11110 A security flaw has been discovered in Campcodes Online Learning Management Syst... |
critical | 9.8 | — | Campcodes / online learning management system | 2025-09-28 | 2026-10-09 |
| CVE-2025-11287 A vulnerability was identified in samanhappy MCPHub up to 0.9.10. |
critical | 9.8 | — | Mcphubx / mcphub | 2025-10-05 | 2026-10-09 |
| CVE-2025-11309 A security flaw has been discovered in Tipray 厦门天锐科技股份有限公司 Data Leak... |
critical | 9.8 | — | Tipray / data leakage prevention system | 2025-10-05 | 2026-10-09 |
| CVE-2025-11310 A weakness has been identified in Tipray 厦门天锐科技股份有限公司 Data Leakage P... |
critical | 9.8 | — | Tipray / data leakage prevention system | 2025-10-06 | 2026-10-09 |
| CVE-2025-11311 A security vulnerability has been detected in Tipray 厦门天锐科技股份有限公司 Da... |
critical | 9.8 | — | Tipray / data leakage prevention system | 2025-10-06 | 2026-10-09 |
| CVE-2025-11312 A vulnerability was detected in Tipray 厦门天锐科技股份有限公司 Data Leakage Pre... |
critical | 9.8 | — | Tipray / data leakage prevention system | 2025-10-06 | 2026-10-09 |
| CVE-2025-11313 A flaw has been found in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention... |
critical | 9.8 | — | Tipray / data leakage prevention system | 2025-10-06 | 2026-10-09 |
| CVE-2025-11314 A vulnerability has been found in Tipray 厦门天锐科技股份有限公司 Data Leakage P... |
critical | 9.8 | — | Tipray / data leakage prevention system | 2025-10-06 | 2026-10-09 |
| CVE-2025-11315 A vulnerability was found in Tipray 厦门天锐科技股份有限公司 Data Leakage Preven... |
critical | 9.8 | — | Tipray / data leakage prevention system | 2025-10-06 | 2026-10-09 |
| CVE-2025-11316 A vulnerability was determined in Tipray 厦门天锐科技股份有限公司 Data Leakage P... |
critical | 9.8 | — | Tipray / data leakage prevention system | 2025-10-06 | 2026-10-09 |
| CVE-2025-11317 A vulnerability was identified in Tipray 厦门天锐科技股份有限公司 Data Leakage P... |
critical | 9.8 | — | Tipray / data leakage prevention system | 2025-10-06 | 2026-10-09 |
| CVE-2025-11318 A security flaw has been discovered in Tipray 厦门天锐科技股份有限公司 Data Leak... |
critical | 9.8 | — | Tipray / data leakage prevention system | 2025-10-06 | 2026-10-09 |
| CVE-2025-11329 A flaw has been found in code-projects Online Course Registration 1.0. |
critical | 9.8 | — | Fabian / online course registration site | 2025-10-06 | 2026-10-09 |
| CVE-2025-11334 A security flaw has been discovered in Campcodes Online Apartment Visitor Manage... |
critical | 9.8 | — | Campcodes / online apartment visitor management system | 2025-10-06 | 2026-10-09 |
| CVE-2025-11338 A flaw has been found in D-Link DI-7100G C1 up to 20250928. |
critical | 9.8 | — | Dlink / di-7100g c1 firmware | 2025-10-06 | 2026-10-09 |
| CVE-2025-11341 A security flaw has been discovered in Jinher OA up to 2.0. |
critical | 9.8 | — | Jinher / jinher oa | 2025-10-06 | 2026-10-09 |
| CVE-2025-61777 Flag Forge is a Capture The Flag (CTF) platform. |
critical | 9.1 | — | Flagforge / flagforge | 2025-10-06 | 2026-10-09 |
| CVE-2025-11342 A weakness has been identified in code-projects Online Course Registration 1.0. |
critical | 9.8 | — | Fabian / online course registration site | 2025-10-06 | 2026-10-09 |
| CVE-2025-11347 A vulnerability was found in code-projects Student Crud Operation up to 3.3. |
critical | 9.8 | — | Code-projects / crud operation system | 2025-10-07 | 2026-10-09 |
| CVE-2025-11348 A vulnerability was determined in Campcodes Online Apartment Visitor Management... |
critical | 9.8 | — | Campcodes / online apartment visitor management system | 2025-10-07 | 2026-10-09 |
| CVE-2025-11349 A vulnerability was identified in Campcodes Online Apartment Visitor Management... |
critical | 9.8 | — | Campcodes / online apartment visitor management system | 2025-10-07 | 2026-10-09 |
| CVE-2025-11350 A security flaw has been discovered in Campcodes Online Apartment Visitor Manage... |
critical | 9.8 | — | Campcodes / online apartment visitor management system | 2025-10-07 | 2026-10-09 |
| CVE-2025-34513 Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an OS command inj... |
critical | 9.8 | — | Ilevia / eve x1 server firmware | 2025-10-16 | 2026-10-09 |
| CVE-2025-34515 Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an execution with... |
critical | 9.8 | — | Ilevia / eve x1 server firmware | 2025-10-16 | 2026-10-09 |
| CVE-2025-34516 Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain a use of default... |
critical | 9.8 | — | Ilevia / eve x1 server firmware | 2025-10-16 | 2026-10-09 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.