October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,480
Critical
3,286
High
7,908
Medium
7,598
Low
740
Severity not reported
4,948
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2025-11604 A vulnerability was determined in projectworlds Online Ordering Food System 1.0. |
critical | 9.8 | — | Projectworlds / online food ordering system | 2025-10-11 | 2026-10-08 |
| CVE-2025-11608 A security vulnerability has been detected in code-projects E-Banking System 1.0... |
critical | 9.8 | — | Fabian / simple e-banking system | 2025-10-11 | 2026-10-08 |
| CVE-2025-11614 A vulnerability was identified in SourceCodester Best Salon Management System 1.... |
critical | 9.8 | — | Mayurik / best salon management system | 2025-10-11 | 2026-10-08 |
| CVE-2025-11615 A security flaw has been discovered in SourceCodester Best Salon Management Syst... |
critical | 9.8 | — | Mayurik / best salon management system | 2025-10-11 | 2026-10-08 |
| CVE-2025-31993 HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side... |
critical | 9.8 | — | Hcltech / unica centralized offer management | 2025-10-12 | 2026-10-08 |
| CVE-2025-31998 HCL Unica Centralized Offer Management is vulnerable to poor unhandled exception... |
critical | 9.8 | — | Hcltech / unica centralized offer management | 2025-10-12 | 2026-10-08 |
| CVE-2025-11629 A vulnerability has been found in RainyGao DocSys up to 2.02.36. |
critical | 9.8 | — | Docsys Project / docsys | 2025-10-12 | 2026-10-08 |
| CVE-2025-11630 A vulnerability was found in RainyGao DocSys up to 2.02.36. |
critical | 9.8 | — | Docsys Project / docsys | 2025-10-12 | 2026-10-08 |
| CVE-2025-11631 A vulnerability was determined in RainyGao DocSys up to 2.02.36. |
critical | 9.1 | — | Docsys Project / docsys | 2025-10-12 | 2026-10-08 |
| CVE-2026-106197 Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remo... |
critical | 9.6 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2025-21043 Samsung Mobile Devices Out-of-Bounds Write Vulnerability |
critical | 9.8 | Listed | Samsung / Mobile Devices | 2025-09-12 | 2026-10-08 |
| CVE-2025-53521 F5 BIG-IP Stack-Based Buffer Overflow Vulnerability |
critical | 9.8 | Listed | F5 / BIG-IP | 2025-10-15 | 2026-10-08 |
| CVE-2025-11656 A weakness has been identified in ProjectsAndPrograms School Management System u... |
critical | 9.8 | — | Oranbyte / school management system | 2025-10-13 | 2026-10-08 |
| CVE-2025-11657 A security vulnerability has been detected in ProjectsAndPrograms School Managem... |
critical | 9.8 | — | Oranbyte / school management system | 2025-10-13 | 2026-10-08 |
| CVE-2025-11658 A vulnerability was detected in ProjectsAndPrograms School Management System up... |
critical | 9.8 | — | Oranbyte / school management system | 2025-10-13 | 2026-10-08 |
| CVE-2025-11659 A flaw has been found in ProjectsAndPrograms School Management System up to 6b6f... |
critical | 9.8 | — | Oranbyte / school management system | 2025-10-13 | 2026-10-08 |
| CVE-2025-11660 A vulnerability has been found in ProjectsAndPrograms School Management System u... |
critical | 9.8 | — | Oranbyte / school management system | 2025-10-13 | 2026-10-08 |
| CVE-2025-11661 A vulnerability was found in ProjectsAndPrograms School Management System up to... |
critical | 9.8 | — | Oranbyte / school management system | 2025-10-13 | 2026-10-08 |
| CVE-2025-11662 A security flaw has been discovered in SourceCodester Best Salon Management Syst... |
critical | 9.8 | — | Mayurik / best salon management system | 2025-10-13 | 2026-10-08 |
| CVE-2025-11664 A security vulnerability has been detected in Campcodes Online Beauty Parlor Man... |
critical | 9.8 | — | Campcodes / online beauty parlor management system | 2025-10-13 | 2026-10-08 |
| CVE-2025-11665 A vulnerability was detected in D-Link DAP-2695 2.00RC131. |
critical | 9.8 | — | Dlink / dap-2695 firmware | 2025-10-13 | 2026-10-08 |
| CVE-2025-27258 Ericsson Network Manager (ENM) versions prior to ENM 25.1 GA contain a vulnerabi... |
critical | 9.8 | — | Ericsson / network manager | 2025-10-13 | 2026-10-08 |
| CVE-2025-11717 When switching between Android apps using the card carousel Firefox shows a blac... |
critical | 9.1 | — | Mozilla / firefox | 2025-10-14 | 2026-10-08 |
| CVE-2025-7328 Multiple Broken Authentication security issues exist in the affected product. |
critical | 9.8 | — | Rockwellautomation / 1783-natr firmware | 2025-10-14 | 2026-10-08 |
| CVE-2025-9063 An authentication bypass security issue exists within FactoryTalk View Machine E... |
critical | 9.8 | — | Rockwellautomation / factorytalk view | 2025-10-14 | 2026-10-08 |
| CVE-2025-9064 A path traversal security issue exists within FactoryTalk View Machine Edition,... |
critical | 9.1 | — | Rockwellautomation / factorytalk view | 2025-10-14 | 2026-10-08 |
| CVE-2025-11736 A flaw has been found in itsourcecode Online Examination System 1.0. |
critical | 9.8 | — | Angeljudesuarez / online examination system | 2025-10-14 | 2026-10-08 |
| CVE-2025-55081 In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secur... |
critical | 9.1 | — | Eclipse / threadx netx duo | 2025-10-15 | 2026-10-08 |
| CVE-2025-61757 Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerabil... |
critical | 9.8 | Listed | Oracle / Fusion Middleware | 2025-10-21 | 2026-10-08 |
| CVE-2025-55089 In FileX before 6.4.2, the file support module for Eclipse Foundation ThreadX, t... |
critical | 9.8 | — | Eclipse / threadx filex | 2025-10-16 | 2026-10-08 |
| CVE-2025-41018 SQL injection in Sergestec's Exito v8.0. |
critical | 9.8 | — | Sergestec / exito | 2025-10-16 | 2026-10-08 |
| CVE-2025-41108 The communication protocol implemented in Ghost Robotics Vision 60 v0.27.2 could... |
critical | 9.8 | — | Ghostrobotics / vision 60 firmware | 2025-10-22 | 2026-10-08 |
| CVE-2025-59273 Improper access control in Azure Event Grid allows an unauthorized attacker to e... |
critical | 9.8 | — | Microsoft / azure event grid | 2025-10-23 | 2026-10-08 |
| CVE-2025-59503 Server-side request forgery (ssrf) in Azure Compute Gallery allows an unauthoriz... |
critical | 9.8 | — | Microsoft / azure compute resource provider | 2025-10-23 | 2026-10-08 |
| CVE-2025-12208 A vulnerability was found in SourceCodester Best House Rental Management System... |
critical | 9.8 | — | Mayurik / best house rental management system | 2025-10-27 | 2026-10-08 |
| CVE-2025-12210 A vulnerability was identified in Tenda O3 1.0.0.10(2478). |
critical | 9.8 | — | Tenda / o3 firmware1.0.0.10\(2478\) | 2025-10-27 | 2026-10-08 |
| CVE-2025-12211 A security flaw has been discovered in Tenda O3 1.0.0.10(2478). |
critical | 9.8 | — | Tenda / o3 firmware1.0.0.10\(2478\) | 2025-10-27 | 2026-10-08 |
| CVE-2025-12215 A flaw has been found in projectworlds Online Shopping System 1.0. |
critical | 9.8 | — | Projectworlds / online shopping system | 2025-10-27 | 2026-10-08 |
| CVE-2025-12226 A vulnerability was found in SourceCodester Best House Rental Management System... |
critical | 9.8 | — | Mayurik / best house rental management system | 2025-10-27 | 2026-10-08 |
| CVE-2025-12232 A vulnerability was detected in Tenda CH22 1.0.0.1. |
critical | 9.8 | — | Tenda / ch22 firmware | 2025-10-27 | 2026-10-08 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.