October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,482
Critical
3,286
High
7,908
Medium
7,600
Low
740
Severity not reported
4,948
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2025-12237 A vulnerability was identified in projectworlds Advanced Library Management Syst... |
critical | 9.8 | — | Projectworlds / advanced library management system | 2025-10-27 | 2026-10-08 |
| CVE-2025-12239 A weakness has been identified in TOTOLINK A3300R 17.0.0cu.557_B20221024. |
critical | 9.8 | — | Totolink / a3300r firmware | 2025-10-27 | 2026-10-08 |
| CVE-2025-12240 A security vulnerability has been detected in TOTOLINK A3300R 17.0.0cu.557_B2022... |
critical | 9.8 | — | Totolink / a3300r firmware | 2025-10-27 | 2026-10-08 |
| CVE-2025-12253 A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. |
critical | 9.8 | — | Amttgroup / hibos | 2025-10-27 | 2026-10-08 |
| CVE-2025-12257 A security vulnerability has been detected in SourceCodester Online Student Resu... |
critical | 9.8 | — | Oretnom23 / online student result system | 2025-10-27 | 2026-10-08 |
| CVE-2025-12265 A weakness has been identified in Tenda CH22 1.0.0.1. |
critical | 9.8 | — | Tenda / ch22 firmware | 2025-10-27 | 2026-10-08 |
| CVE-2025-59461 A remote unauthenticated attacker may use the unauthenticated C++ API to access... |
critical | 9.8 | — | Sick / tloc100-100 firmware | 2025-10-27 | 2026-10-08 |
| CVE-2025-12271 A vulnerability was identified in Tenda CH22 1.0.0.1. |
critical | 9.8 | — | Tenda / ch22 firmware | 2025-10-27 | 2026-10-08 |
| CVE-2025-12272 A security flaw has been discovered in Tenda CH22 1.0.0.1. |
critical | 9.8 | — | Tenda / ch22 firmware | 2025-10-27 | 2026-10-08 |
| CVE-2025-12273 A weakness has been identified in Tenda CH22 1.0.0.1. |
critical | 9.8 | — | Tenda / ch22 firmware | 2025-10-27 | 2026-10-08 |
| CVE-2025-12292 A vulnerability was determined in SourceCodester Point of Sales 1.0. |
critical | 9.8 | — | Janobe / point of sales | 2025-10-27 | 2026-10-08 |
| CVE-2025-12293 A vulnerability was identified in SourceCodester Point of Sales 1.0. |
critical | 9.8 | — | Janobe / point of sales | 2025-10-27 | 2026-10-08 |
| CVE-2025-12294 A security flaw has been discovered in SourceCodester Point of Sales 1.0. |
critical | 9.8 | — | Janobe / point of sales | 2025-10-27 | 2026-10-08 |
| CVE-2025-12296 A security vulnerability has been detected in D-Link DAP-2695 2.00RC13. |
critical | 9.8 | — | Dlink / dap-2695 firmware | 2025-10-27 | 2026-10-08 |
| CVE-2025-12301 A security vulnerability has been detected in code-projects Simple Food Ordering... |
critical | 9.8 | — | Fabian / simple food ordering system | 2025-10-27 | 2026-10-08 |
| CVE-2025-12305 A vulnerability was found in quequnlong shiyi-blog up to 1.2.1. |
critical | 9.8 | — | Quequnlong / shiyi-blog | 2025-10-27 | 2026-10-08 |
| CVE-2025-12306 A vulnerability was determined in code-projects Nero Social Networking Site 1.0. |
critical | 9.8 | — | Fabian / nero social networking site | 2025-10-27 | 2026-10-08 |
| CVE-2025-12307 A vulnerability was identified in code-projects Nero Social Networking Site 1.0. |
critical | 9.8 | — | Fabian / nero social networking site | 2025-10-27 | 2026-10-08 |
| CVE-2025-12308 A security flaw has been discovered in code-projects Nero Social Networking Site... |
critical | 9.8 | — | Fabian / nero social networking site | 2025-10-27 | 2026-10-08 |
| CVE-2025-12309 A weakness has been identified in code-projects Nero Social Networking Site 1.0. |
critical | 9.8 | — | Fabian / nero social networking site | 2025-10-27 | 2026-10-08 |
| CVE-2025-12313 A vulnerability has been found in D-Link DI-7001 MINI 19.09.19A1/24.04.18B1. |
critical | 9.8 | — | Dlink / di-7001mini-8g firmware | 2025-10-27 | 2026-10-08 |
| CVE-2025-12314 A vulnerability was found in code-projects Food Ordering System 1.0. |
critical | 9.8 | — | Code-projects / food ordering system | 2025-10-27 | 2026-10-08 |
| CVE-2025-12315 A vulnerability was determined in code-projects Food Ordering System 1.0. |
critical | 9.8 | — | Code-projects / food ordering system | 2025-10-27 | 2026-10-08 |
| CVE-2025-12316 A vulnerability was identified in code-projects Courier Management System 1.0. |
critical | 9.8 | — | Carmelogarcia / courier management system | 2025-10-27 | 2026-10-08 |
| CVE-2025-12325 A vulnerability has been found in SourceCodester Best Salon Management System 1.... |
critical | 9.8 | — | Mayurik / best salon management system | 2025-10-27 | 2026-10-08 |
| CVE-2025-12336 A vulnerability was identified in Campcodes Retro Basketball Shoes Online Store... |
critical | 9.8 | — | Campcodes / retro basketball shoes online store | 2025-10-28 | 2026-10-08 |
| CVE-2025-12337 A security flaw has been discovered in Campcodes Retro Basketball Shoes Online S... |
critical | 9.8 | — | Campcodes / retro basketball shoes online store | 2025-10-28 | 2026-10-08 |
| CVE-2025-12338 A weakness has been identified in Campcodes Retro Basketball Shoes Online Store... |
critical | 9.8 | — | Campcodes / retro basketball shoes online store | 2025-10-28 | 2026-10-08 |
| CVE-2025-12339 A security vulnerability has been detected in Campcodes Retro Basketball Shoes O... |
critical | 9.8 | — | Campcodes / retro basketball shoes online store | 2025-10-28 | 2026-10-08 |
| CVE-2025-12378 A security flaw has been discovered in code-projects Simple Food Ordering System... |
critical | 9.8 | — | Fabian / simple food ordering system | 2025-10-28 | 2026-10-08 |
| CVE-2025-43017 HP ThinPro 8.1 System management application failed to verify user's true id. |
critical | 9.8 | — | Hp / thinpro | 2025-10-28 | 2026-10-08 |
| CVE-2026-63030 WordPress Core Interpretation Conflict Vulnerability |
critical | 9.8 | Listed | WordPress / Core | 2026-07-17 | 2026-10-08 |
| CVE-2025-21042 Samsung Mobile Devices Out-of-Bounds Write Vulnerability |
critical | 9.8 | Listed | Samsung / Mobile Devices | 2025-09-12 | 2026-10-08 |
| CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability |
critical | 9.8 | Listed | Cleo / Multiple Products | 2024-10-28 | 2026-10-08 |
| CVE-2025-13357 Vault’s Terraform Provider incorrectly set the default deny_null_bind parameter... |
critical | 9.8 | — | Hashicorp / terraform provider | 2025-11-21 | 2026-10-08 |
| CVE-2025-62608 MLX is an array framework for machine learning on Apple silicon. |
critical | 9.1 | — | Ml-explore / mlx | 2025-11-21 | 2026-10-08 |
| CVE-2025-13561 A vulnerability was determined in SourceCodester Company Website CMS 1.0. |
critical | 9.8 | — | Torrahclef / company website cms | 2025-11-23 | 2026-10-08 |
| CVE-2025-13562 A vulnerability was identified in D-Link DIR-852 1.00. |
critical | 9.8 | — | Dlink / dir-852 firmware | 2025-11-23 | 2026-10-08 |
| CVE-2025-13565 A weakness has been identified in SourceCodester Inventory Management System 1.0... |
critical | 9.1 | — | Warren-daloyan / inventory management system | 2025-11-23 | 2026-10-08 |
| CVE-2025-13572 A vulnerability was identified in projectworlds Advanced Library Management Syst... |
critical | 9.8 | — | Projectworlds / advanced library management system | 2025-11-23 | 2026-10-08 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.