October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,482
Critical
3,286
High
7,908
Medium
7,600
Low
740
Severity not reported
4,948
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2025-13578 A vulnerability has been found in code-projects Library System 1.0. |
critical | 9.8 | — | Code-projects / library system | 2025-11-24 | 2026-10-08 |
| CVE-2025-13582 A security flaw has been discovered in code-projects Jonnys Liquor 1.0. |
critical | 9.8 | — | Anisha / jonnys liquor | 2025-11-24 | 2026-10-08 |
| CVE-2025-13583 A weakness has been identified in code-projects Question Paper Generator 1.0. |
critical | 9.8 | — | Carmelo / question paper generator | 2025-11-24 | 2026-10-08 |
| CVE-2025-13585 A vulnerability was detected in itsourcecode COVID Tracking System 1.0. |
critical | 9.8 | — | Angeljudesuarez / covid tracking system | 2025-11-24 | 2026-10-08 |
| CVE-2025-67511 Cybersecurity AI (CAI) is an open-source framework for building and deploying AI... |
critical | 9.6 | — | Aliasrobotics / cybersecurity ai | 2025-12-11 | 2026-10-08 |
| CVE-2025-14514 A flaw has been found in Campcodes Supplier Management System 1.0. |
critical | 9.8 | — | Campcodes / supplier management system | 2025-12-11 | 2026-10-08 |
| CVE-2025-14515 A vulnerability has been found in Campcodes Supplier Management System 1.0. |
critical | 9.8 | — | Campcodes / supplier management system | 2025-12-11 | 2026-10-08 |
| CVE-2026-79805 An authenticated path traversal vulnerability exists in ClearPass Policy Manager... |
critical | 9.8 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-79801 A missing integrity verification vulnerability in the client agent software of H... |
critical | 9.8 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-79798 SQL injection vulnerabilities in the web-based management interface of ClearPass... |
critical | 9.9 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-79794 A SQL injection vulnerability in the web-based management interface of ClearPass... |
critical | 9.1 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-79796 Vulnerabilities have been identified in the affected interface of ClearPass Poli... |
critical | 9.8 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-76752 Authentication bypass vulnerabilities exist in the web-based management and API... |
critical | 9.8 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-76753 A format string vulnerability in an affected service interface of HPE Networking... |
critical | 9.8 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-76754 A vulnerability in an affected interface of ClearPass Policy Manager could allow... |
critical | 9.8 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-76750 Deserialization of untrusted data vulnerabilities exist in the web interface of... |
critical | 9.8 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-76751 A missing integrity verification vulnerability exists in the OnGuard agent of Cl... |
critical | 9.8 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-76745 Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauth... |
critical | 9.6 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-76743 A vulnerability have been identified in the management interface of AOS-S that c... |
critical | 9.8 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-76744 Buffer overflow vulnerabilities exist in the affected interface of AOS-S. |
critical | 9.8 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-76742 Authentication bypass vulnerabilities exist in the web management interface of A... |
critical | 9.8 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-105763 Twenty is an open-source CRM (customer relationship management) platform. |
critical | 9.6 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-103877 Deserialization of Untrusted Data vulnerability in Apache Directory LDAP API. |
critical | 9.8 | — | — | 2026-10-02 | 2026-10-07 |
| CVE-2026-105636 Plane is an open-source project management tool. |
critical | 9.9 | — | — | 2026-10-05 | 2026-10-07 |
| CVE-2026-105641 Plane is an open-source project management tool. |
critical | 9.8 | — | — | 2026-10-05 | 2026-10-07 |
| CVE-2020-9547 FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee... |
critical | 9.8 | — | Fasterxml / jackson-databind | 2020-03-02 | 2026-10-07 |
| CVE-2026-86345 A flaw was found in 389-ds-base. |
critical | 9.0 | — | — | 2026-10-02 | 2026-10-07 |
| CVE-2026-107202 A command injection vulnerability exists in the h-ui (version v0.0.25 and below)... |
critical | 9.1 | — | — | 2026-10-07 | 2026-10-07 |
| CVE-2025-70521 The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.... |
critical | 9.8 | — | — | 2026-10-07 | 2026-10-07 |
| CVE-2020-9546 FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee... |
critical | 9.8 | — | Fasterxml / jackson-databind | 2020-03-02 | 2026-10-07 |
| CVE-2019-16943 A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 th... |
critical | 9.8 | — | Fasterxml / jackson-databind | 2019-10-01 | 2026-10-07 |
| CVE-2025-3356 IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remo... |
critical | 9.8 | — | Ibm / tivoli monitoring | 2025-10-30 | 2026-10-07 |
| CVE-2025-34271 Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the cl... |
critical | 9.8 | — | Nagios / log server | 2025-10-30 | 2026-10-07 |
| CVE-2025-34274 Nagios Log Server versions prior to 2024R2.0.3 contain an execution with unneces... |
critical | 9.8 | — | Nagios / log server | 2025-10-30 | 2026-10-07 |
| CVE-2025-34277 Nagios Log Server versions prior to 2024R1.3.1 contain a code injection vulnerab... |
critical | 9.8 | — | Nagios / log server | 2025-10-30 | 2026-10-07 |
| CVE-2025-59171 Due to insufficient sanitization, an attacker can upload a specially
crafted co... |
critical | 9.8 | — | Advantech / deviceon\/iedge | 2025-11-06 | 2026-10-07 |
| CVE-2025-62630 Due to insufficient sanitization, an attacker can upload a specially
crafted co... |
critical | 9.8 | — | Advantech / deviceon\/iedge | 2025-11-06 | 2026-10-07 |
| CVE-2025-64338 ClipBucket v5 is an open source video sharing platform. |
critical | 9.0 | — | Oxygenz / clipbucket | 2025-11-07 | 2026-10-07 |
| CVE-2025-12853 A vulnerability was determined in SourceCodester Best House Rental Management Sy... |
critical | 9.8 | — | Mayurik / best house rental management system | 2025-11-07 | 2026-10-07 |
| CVE-2025-12855 A security flaw has been discovered in code-projects Responsive Hotel Site 1.0. |
critical | 9.8 | — | Fabian / responsive hotel site | 2025-11-07 | 2026-10-07 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.