October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,480
Critical
3,286
High
7,908
Medium
7,598
Low
740
Severity not reported
4,948
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-85597 Traefik before v2.11.55 and v3.0.0 through v3.7.10 contain a TLS option conflict... |
critical | 9.1 | — | Traefik / traefik | 2026-09-04 | 2026-10-08 |
| CVE-2026-74881 openssl_encrypt versions before 1.4.0 configure CORS with allow_origins set to w... |
critical | 9.3 | — | Jahlives / openssl encrypt | 2026-08-17 | 2026-10-08 |
| CVE-2026-35002 Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability... |
critical | 9.8 | — | Agno / agno | 2026-04-02 | 2026-10-08 |
| CVE-2026-32064 OpenClaw versions prior to 2026.2.21 sandbox browser entrypoint launches x11vnc... |
critical | 9.1 | — | Openclaw / openclaw | 2026-03-21 | 2026-10-08 |
| CVE-2026-24425 Twig versions 2.16.x and 3.9.0 through 3.25.x contain a sandbox bypass vulnerabi... |
critical | 9.9 | — | Symfony / twig | 2026-05-20 | 2026-10-08 |
| CVE-2025-3248 Langflow Missing Authentication Vulnerability |
critical | 9.8 | Listed | Langflow / Langflow | 2025-04-07 | 2026-10-08 |
| CVE-2025-34267 Flowise v3.0.1 < 3.0.8 and all versions after with 'ALLOW_BUILTIN_DEP' enabled c... |
critical | 9.9 | — | Flowiseai / flowise | 2025-10-14 | 2026-10-08 |
| CVE-2019-25710 Dolibarr ERP-CRM 8.0.4 contains an SQL injection vulnerability in the rowid para... |
critical | 9.1 | — | Dolibarr / dolibarr erp\/crm | 2026-04-12 | 2026-10-08 |
| CVE-2011-10019 Spreecommerce versions prior to 0.60.2 contains a remote command execution vulne... |
critical | 9.8 | — | Spreecommerce / spree | 2025-08-13 | 2026-10-08 |
| CVE-2026-18922 A flaw was found in 389 Directory Server. |
critical | 9.8 | — | — | 2026-09-07 | 2026-10-08 |
| CVE-2026-106218 In JetBrains TeamCity before 2026.1.3
2025.11.7 kotlin DSL sandbox escape leadin... |
critical | 10.0 | — | Jetbrains / teamcity | 2026-10-06 | 2026-10-08 |
| CVE-2026-61421 Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of H... |
critical | 9.8 | — | Dell / container storage modules | 2026-10-06 | 2026-10-08 |
| CVE-2026-63688 Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Miss... |
critical | 10.0 | — | Dell / container storage modules | 2026-10-06 | 2026-10-08 |
| CVE-2026-106211 Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a rem... |
critical | 9.6 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-17635 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
critical | 9.1 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-08 |
| CVE-2026-102106 Improper authentication in a Kiteworks Email Protection Gateway administrative s... |
critical | 9.1 | — | Accellion / kiteworks | 2026-09-30 | 2026-10-08 |
| CVE-2026-102105 Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-... |
critical | 9.1 | — | Accellion / kiteworks | 2026-09-30 | 2026-10-08 |
| CVE-2026-102104 Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-... |
critical | 9.1 | — | Accellion / kiteworks | 2026-09-30 | 2026-10-08 |
| CVE-2026-102103 Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-... |
critical | 9.1 | — | Accellion / kiteworks | 2026-09-30 | 2026-10-08 |
| CVE-2026-102102 Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-... |
critical | 9.1 | — | Accellion / kiteworks | 2026-09-30 | 2026-10-08 |
| CVE-2026-102095 Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-... |
critical | 9.1 | — | Accellion / kiteworks | 2026-09-30 | 2026-10-08 |
| CVE-2026-102322 Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39... |
critical | 9.6 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2020-9054 Zyxel Multiple NAS Devices OS Command Injection Vulnerability |
critical | 9.8 | Listed | Zyxel / Multiple Network-Attached Storage (NAS) Devices | 2020-03-04 | 2026-10-08 |
| CVE-2026-83452 Vulnerability in the Oracle Document Management and Collaboration product of Ora... |
critical | 9.8 | — | Oracle / document management and collaboration | 2026-09-15 | 2026-10-08 |
| CVE-2026-103264 Fleet versions before 4.87.0 contain an authentication bypass vulnerability in t... |
critical | 9.1 | — | Fleetdm / fleet | 2026-10-01 | 2026-10-08 |
| CVE-2025-11407 A weakness has been identified in D-Link DI-7001 MINI 24.04.18B1. |
critical | 9.8 | — | Dlink / di-7001mini-8g firmware | 2025-10-07 | 2026-10-08 |
| CVE-2025-11408 A security vulnerability has been detected in D-Link DI-7001 MINI 24.04.18B1. |
critical | 9.8 | — | Dlink / di-7001mini-8g firmware | 2025-10-07 | 2026-10-08 |
| CVE-2025-11415 A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.... |
critical | 9.8 | — | Phpgurukul / beauty parlour management system | 2025-10-07 | 2026-10-08 |
| CVE-2025-11416 A security flaw has been discovered in PHPGurukul Beauty Parlour Management Syst... |
critical | 9.8 | — | Phpgurukul / beauty parlour management system | 2025-10-07 | 2026-10-08 |
| CVE-2025-11420 A vulnerability was detected in code-projects E-Commerce Website 1.0. |
critical | 9.8 | — | Fabian / e-commerce website | 2025-10-08 | 2026-10-08 |
| CVE-2025-11422 A vulnerability has been found in Campcodes Advanced Online Voting Management Sy... |
critical | 9.8 | — | Campcodes / advanced online voting system | 2025-10-08 | 2026-10-08 |
| CVE-2025-11424 A vulnerability was determined in code-projects Web-Based Inventory and POS Syst... |
critical | 9.8 | — | Fabian / web-based inventory and pos system | 2025-10-08 | 2026-10-08 |
| CVE-2025-11430 A vulnerability was found in SourceCodester Simple E-Commerce Bookstore 1.0. |
critical | 9.8 | — | Janobe / simple e-commerce bookstore | 2025-10-08 | 2026-10-08 |
| CVE-2025-11431 A vulnerability was determined in code-projects Web-Based Inventory and POS Syst... |
critical | 9.8 | — | Fabian / web-based inventory and pos system | 2025-10-08 | 2026-10-08 |
| CVE-2025-11432 A vulnerability was identified in itsourcecode Leave Management System 1.0. |
critical | 9.8 | — | Itsourcecode / leave management system | 2025-10-08 | 2026-10-08 |
| CVE-2025-11434 A weakness has been identified in itsourcecode Student Transcript Processing Sys... |
critical | 9.8 | — | Fabian / student transcript processing system | 2025-10-08 | 2026-10-08 |
| CVE-2025-11469 A weakness has been identified in SourceCodester Hotel and Lodge Management Syst... |
critical | 9.8 | — | Nikhil-bhalerao / hotel and lodge management system | 2025-10-08 | 2026-10-08 |
| CVE-2025-11471 A vulnerability was detected in SourceCodester Hotel and Lodge Management System... |
critical | 9.8 | — | Nikhil-bhalerao / hotel and lodge management system | 2025-10-08 | 2026-10-08 |
| CVE-2025-11472 A flaw has been found in SourceCodester Hotel and Lodge Management System 1.0. |
critical | 9.8 | — | Nikhil-bhalerao / hotel and lodge management system | 2025-10-08 | 2026-10-08 |
| CVE-2025-11473 A vulnerability has been found in SourceCodester Hotel and Lodge Management Syst... |
critical | 9.8 | — | Nikhil-bhalerao / hotel and lodge management system | 2025-10-08 | 2026-10-08 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.