October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,482
Critical
3,286
High
7,908
Medium
7,600
Low
740
Severity not reported
4,948
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2025-12856 A weakness has been identified in code-projects Responsive Hotel Site 1.0. |
critical | 9.8 | — | Fabian / responsive hotel site | 2025-11-07 | 2026-10-07 |
| CVE-2025-12857 A security vulnerability has been detected in code-projects Responsive Hotel Sit... |
critical | 9.8 | — | Fabian / responsive hotel site | 2025-11-07 | 2026-10-07 |
| CVE-2025-12862 A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.... |
critical | 9.8 | — | Projectworlds / online notes sharing platform | 2025-11-07 | 2026-10-07 |
| CVE-2025-12873 A security flaw has been discovered in Campcodes School File Management 1.0. |
critical | 9.8 | — | Campcodes / school file management system | 2025-11-07 | 2026-10-07 |
| CVE-2025-12913 A flaw has been found in code-projects Responsive Hotel Site 1.0. |
critical | 9.8 | — | Fabian / responsive hotel site | 2025-11-08 | 2026-10-07 |
| CVE-2025-12925 A security flaw has been discovered in rymcu forest up to de53ce79db9faa2efc4e79... |
critical | 9.8 | — | Rymcu / forest | 2025-11-10 | 2026-10-07 |
| CVE-2025-12928 A vulnerability was detected in code-projects Online Job Search Engine 1.0. |
critical | 9.8 | — | Fabian / online job search engine | 2025-11-10 | 2026-10-07 |
| CVE-2025-12929 A flaw has been found in SourceCodester Survey Application System 1.0. |
critical | 9.8 | — | Oretnom23 / survey application system | 2025-11-10 | 2026-10-07 |
| CVE-2025-12930 A vulnerability has been found in SourceCodester Food Ordering System 1.0. |
critical | 9.8 | — | Janobe / food ordering system | 2025-11-10 | 2026-10-07 |
| CVE-2025-12931 A vulnerability was found in SourceCodester Food Ordering System 1.0. |
critical | 9.8 | — | Janobe / food ordering system | 2025-11-10 | 2026-10-07 |
| CVE-2025-12932 A vulnerability was determined in SourceCodester Baby Care System 1.0. |
critical | 9.8 | — | Janobe / baby care system | 2025-11-10 | 2026-10-07 |
| CVE-2025-12933 A vulnerability was identified in SourceCodester Baby Care System 1.0. |
critical | 9.8 | — | Janobe / baby care system | 2025-11-10 | 2026-10-07 |
| CVE-2025-12938 A vulnerability was identified in projectworlds Online Admission System 1.0. |
critical | 9.8 | — | Projectworlds / online admission system | 2025-11-10 | 2026-10-07 |
| CVE-2025-12939 A security flaw has been discovered in SourceCodester Interview Management Syste... |
critical | 9.8 | — | Janobe / interview management system | 2025-11-10 | 2026-10-07 |
| CVE-2025-62484 Inefficient regular expression complexity in certain Zoom Workplace Clients befo... |
critical | 9.8 | — | Zoom / meeting software development kit | 2025-11-13 | 2026-10-07 |
| CVE-2025-13122 A vulnerability was detected in SourceCodester Patients Waiting Area Queue Manag... |
critical | 9.8 | — | Pamzey / patients waiting area queue management system | 2025-11-13 | 2026-10-07 |
| CVE-2025-13169 A security vulnerability has been detected in code-projects Simple Online Hotel... |
critical | 9.8 | — | Fabian / simple online hotel reservation system | 2025-11-14 | 2026-10-07 |
| CVE-2025-13170 A vulnerability was detected in code-projects Simple Online Hotel Reservation Sy... |
critical | 9.8 | — | Fabian / simple online hotel reservation system | 2025-11-14 | 2026-10-07 |
| CVE-2025-13201 A vulnerability was identified in code-projects Simple Cafe Ordering System 1.0. |
critical | 9.8 | — | Fabian / simple cafe ordering system | 2025-11-15 | 2026-10-07 |
| CVE-2025-13203 A weakness has been identified in code-projects Simple Cafe Ordering System 1.0. |
critical | 9.8 | — | Fabian / simple cafe ordering system | 2025-11-15 | 2026-10-07 |
| CVE-2025-13210 A security vulnerability has been detected in itsourcecode Inventory Management... |
critical | 9.8 | — | Janobe / inventory management system | 2025-11-15 | 2026-10-07 |
| CVE-2025-13247 A security flaw has been discovered in PHPGurukul Tourism Management System 1.0. |
critical | 9.8 | — | Phpgurukul / tourism management system | 2025-11-16 | 2026-10-07 |
| CVE-2025-13257 A security vulnerability has been detected in itsourcecode Inventory Management... |
critical | 9.8 | — | Janobe / inventory management system | 2025-11-17 | 2026-10-07 |
| CVE-2025-13262 A vulnerability was determined in lsfusion platform up to 6.1. |
critical | 9.8 | — | Lsfusion / lsfusion platform | 2025-11-17 | 2026-10-07 |
| CVE-2025-13265 A weakness has been identified in lsfusion platform up to 6.1. |
critical | 9.1 | — | Lsfusion / lsfusion platform | 2025-11-17 | 2026-10-07 |
| CVE-2025-13267 A vulnerability was detected in SourceCodester Dental Clinic Appointment Reserva... |
critical | 9.8 | — | Jkev / dental clinic appointment reservation system | 2025-11-17 | 2026-10-07 |
| CVE-2025-13271 A vulnerability was determined in Campcodes School Fees Payment Management Syste... |
critical | 9.8 | — | Campcodes / school fees payment management system | 2025-11-17 | 2026-10-07 |
| CVE-2025-13272 A vulnerability was identified in Campcodes School Fees Payment Management Syste... |
critical | 9.8 | — | Campcodes / school fees payment management system | 2025-11-17 | 2026-10-07 |
| CVE-2025-13277 A flaw has been found in code-projects Nero Social Networking Site 1.0. |
critical | 9.8 | — | Fabian / nero social networking site | 2025-11-17 | 2026-10-07 |
| CVE-2025-13280 A vulnerability was determined in CodeAstro Simple Inventory System 1.0. |
critical | 9.8 | — | Codeastro / simple inventory system | 2025-11-17 | 2026-10-07 |
| CVE-2025-13285 A vulnerability was identified in itsourcecode Online Voting System 1.0. |
critical | 9.8 | — | Angeljudesuarez / online voting system | 2025-11-17 | 2026-10-07 |
| CVE-2025-13291 A vulnerability was found in Campcodes Supplier Management System 1.0. |
critical | 9.8 | — | Campcodes / supplier management system | 2025-11-17 | 2026-10-07 |
| CVE-2025-13297 A security vulnerability has been detected in itsourcecode Web-Based Internet La... |
critical | 9.8 | — | Itsourcecode / web-based internet laboratory management system | 2025-11-17 | 2026-10-07 |
| CVE-2025-55055 CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Co... |
critical | 9.8 | — | Maxum / rumpus | 2025-11-17 | 2026-10-07 |
| CVE-2025-55058 CWE-20 Improper Input Validation |
critical | 9.8 | — | Maxum / rumpus | 2025-11-17 | 2026-10-07 |
| CVE-2025-13298 A vulnerability was detected in itsourcecode Web-Based Internet Laboratory Manag... |
critical | 9.8 | — | Itsourcecode / web-based internet laboratory management system | 2025-11-17 | 2026-10-07 |
| CVE-2025-13299 A flaw has been found in itsourcecode Web-Based Internet Laboratory Management S... |
critical | 9.8 | — | Itsourcecode / web-based internet laboratory management system | 2025-11-17 | 2026-10-07 |
| CVE-2025-13300 A vulnerability has been found in itsourcecode Web-Based Internet Laboratory Man... |
critical | 9.8 | — | Itsourcecode / web-based internet laboratory management system | 2025-11-17 | 2026-10-07 |
| CVE-2025-13301 A vulnerability was found in itsourcecode Web-Based Internet Laboratory Manageme... |
critical | 9.8 | — | Itsourcecode / web-based internet laboratory management system | 2025-11-17 | 2026-10-07 |
| CVE-2025-13302 A vulnerability was identified in code-projects Courier Management System 1.0. |
critical | 9.8 | — | Carmelogarcia / courier management system | 2025-11-17 | 2026-10-07 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.