October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,480
Critical
3,286
High
7,908
Medium
7,598
Low
740
Severity not reported
4,948
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2025-11474 A vulnerability was found in SourceCodester Hotel and Lodge Management System 1.... |
critical | 9.8 | — | Nikhil-bhalerao / hotel and lodge management system | 2025-10-08 | 2026-10-08 |
| CVE-2025-11475 A vulnerability was determined in projectworlds Advanced Library Management Syst... |
critical | 9.8 | — | Projectworlds / advanced library management system | 2025-10-08 | 2026-10-08 |
| CVE-2025-11476 A vulnerability was identified in SourceCodester Simple E-Commerce Bookstore 1.0... |
critical | 9.8 | — | Janobe / simple e-commerce bookstore | 2025-10-08 | 2026-10-08 |
| CVE-2025-11477 A security flaw has been discovered in SourceCodester Wedding Reservation Manage... |
critical | 9.8 | — | Janobe / wedding reservation management system | 2025-10-08 | 2026-10-08 |
| CVE-2025-11479 A security vulnerability has been detected in SourceCodester Wedding Reservation... |
critical | 9.8 | — | Janobe / wedding reservation management system | 2025-10-08 | 2026-10-08 |
| CVE-2025-11480 A vulnerability was detected in SourceCodester Simple E-Commerce Bookstore 1.0. |
critical | 9.8 | — | Janobe / simple e-commerce bookstore | 2025-10-08 | 2026-10-08 |
| CVE-2025-11481 A flaw has been found in varunsardana004 Blood-Bank-And-Donation-Management-Syst... |
critical | 9.8 | — | Varunsardana004 / blood bank and donation management system | 2025-10-08 | 2026-10-08 |
| CVE-2025-11486 A vulnerability was identified in SourceCodester Farm Management System 1.0. |
critical | 9.8 | — | Janobe / farm management system | 2025-10-08 | 2026-10-08 |
| CVE-2025-11487 A security flaw has been discovered in SourceCodester Farm Management System 1.0... |
critical | 9.8 | — | Janobe / farm management system | 2025-10-08 | 2026-10-08 |
| CVE-2025-11490 A vulnerability has been found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. |
critical | 9.8 | — | Wonderwhy-er / desktopcommandermcp | 2025-10-08 | 2026-10-08 |
| CVE-2025-11491 A vulnerability was found in wonderwhy-er DesktopCommanderMCP up to 0.2.13. |
critical | 9.8 | — | Wonderwhy-er / desktopcommandermcp | 2025-10-08 | 2026-10-08 |
| CVE-2025-11503 A vulnerability was determined in PHPGurukul Beauty Parlour Management System 1.... |
critical | 9.8 | — | Phpgurukul / beauty parlour management system | 2025-10-08 | 2026-10-08 |
| CVE-2025-11505 A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.... |
critical | 9.8 | — | Phpgurukul / beauty parlour management system | 2025-10-08 | 2026-10-08 |
| CVE-2025-11506 A security flaw has been discovered in PHPGurukul Beauty Parlour Management Syst... |
critical | 9.8 | — | Phpgurukul / beauty parlour management system | 2025-10-08 | 2026-10-08 |
| CVE-2025-11507 A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.... |
critical | 9.8 | — | Phpgurukul / beauty parlour management system | 2025-10-08 | 2026-10-08 |
| CVE-2025-11508 A security vulnerability has been detected in code-projects Voting System 1.0. |
critical | 9.8 | — | Fabian / voting system | 2025-10-08 | 2026-10-08 |
| CVE-2025-11509 A vulnerability was detected in code-projects E-Commerce Website 1.0. |
critical | 9.8 | — | Fabian / e-commerce website | 2025-10-08 | 2026-10-08 |
| CVE-2025-11511 A flaw has been found in code-projects E-Commerce Website 1.0. |
critical | 9.8 | — | Fabian / e-commerce website | 2025-10-08 | 2026-10-08 |
| CVE-2025-61913 Flowise is a drag & drop user interface to build a customized large language mod... |
critical | 9.9 | — | Flowiseai / flowise | 2025-10-08 | 2026-10-08 |
| CVE-2025-11513 A vulnerability was determined in code-projects E-Commerce Website 1.0. |
critical | 9.8 | — | Fabian / e-commerce website | 2025-10-09 | 2026-10-08 |
| CVE-2025-11549 A vulnerability has been found in Tenda W12 3.0.0.6(3948). |
critical | 9.8 | — | Tenda / w12 firmware | 2025-10-09 | 2026-10-08 |
| CVE-2025-11551 A vulnerability was determined in code-projects Student Result Manager 1.0. |
critical | 9.8 | — | Carmelo / student result manager | 2025-10-09 | 2026-10-08 |
| CVE-2025-11553 A weakness has been identified in code-projects Courier Management System 1.0. |
critical | 9.8 | — | Carmelogarcia / courier management system | 2025-10-09 | 2026-10-08 |
| CVE-2025-11555 A vulnerability was detected in Campcodes Online Learning Management System 1.0. |
critical | 9.8 | — | Campcodes / online learning management system | 2025-10-09 | 2026-10-08 |
| CVE-2025-11556 A flaw has been found in code-projects Simple Leave Manager 1.0. |
critical | 9.8 | — | Carmelo / simple leave manager | 2025-10-09 | 2026-10-08 |
| CVE-2025-11557 A vulnerability has been found in projectworlds Gate Pass Management System 1.0. |
critical | 9.8 | — | Projectworlds / gate pass management system | 2025-10-09 | 2026-10-08 |
| CVE-2025-11558 A vulnerability was found in code-projects E-Commerce Website 1.0. |
critical | 9.8 | — | Fabian / e-commerce website | 2025-10-09 | 2026-10-08 |
| CVE-2025-35062 Newforma Info Exchange (NIX) before version 2023.1 by default allows anonymous a... |
critical | 9.8 | — | Newforma / project center | 2025-10-09 | 2026-10-08 |
| CVE-2025-59247 Azure PlayFab Elevation of Privilege Vulnerability |
critical | 9.8 | — | Microsoft / azure playfab | 2025-10-09 | 2026-10-08 |
| CVE-2025-52635 A
rusted types in scripts not enforced in CSP vulnerability has been identifie... |
critical | 9.8 | — | Hcltech / aion | 2025-10-10 | 2026-10-08 |
| CVE-2025-11582 A vulnerability was detected in code-projects Online Job Search Engine 1.0. |
critical | 9.8 | — | Fabian / online job search engine | 2025-10-10 | 2026-10-08 |
| CVE-2025-11583 A flaw has been found in code-projects Online Job Search Engine 1.0. |
critical | 9.8 | — | Fabian / online job search engine | 2025-10-10 | 2026-10-08 |
| CVE-2025-11584 A vulnerability has been found in code-projects Online Job Search Engine 1.0. |
critical | 9.8 | — | Fabian / online job search engine | 2025-10-10 | 2026-10-08 |
| CVE-2025-11585 A vulnerability was found in code-projects Project Monitoring System 1.0. |
critical | 9.8 | — | Fabian / project monitoring system | 2025-10-10 | 2026-10-08 |
| CVE-2025-11586 A vulnerability was determined in Tenda AC7 15.03.06.44. |
critical | 9.8 | — | Tenda / ac7 firmware | 2025-10-10 | 2026-10-08 |
| CVE-2025-11595 A vulnerability was found in Campcodes Online Apartment Visitor Management Syste... |
critical | 9.8 | — | Campcodes / online apartment visitor management system | 2025-10-11 | 2026-10-08 |
| CVE-2025-11596 A vulnerability was determined in code-projects E-Commerce Website 1.0. |
critical | 9.8 | — | Fabian / e-commerce website | 2025-10-11 | 2026-10-08 |
| CVE-2025-11597 A vulnerability was identified in code-projects E-Commerce Website 1.0. |
critical | 9.8 | — | Fabian / e-commerce website | 2025-10-11 | 2026-10-08 |
| CVE-2025-11599 A weakness has been identified in Campcodes Online Apartment Visitor Management... |
critical | 9.8 | — | Campcodes / online apartment visitor management system | 2025-10-11 | 2026-10-08 |
| CVE-2025-11601 A vulnerability was detected in SourceCodester Online Student Result System 1.0. |
critical | 9.8 | — | Oretnom23 / online student result system | 2025-10-11 | 2026-10-08 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.