October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,482
Critical
3,286
High
7,908
Medium
7,600
Low
740
Severity not reported
4,948
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2021-21346 XStream is a Java library to serialize objects to XML and back again. |
critical | 9.8 | — | Netapp / oncommand insight | 2021-03-23 | 2026-10-07 |
| CVE-2021-21342 XStream is a Java library to serialize objects to XML and back again. |
critical | 9.1 | — | Netapp / oncommand insight | 2021-03-23 | 2026-10-07 |
| CVE-2019-17267 A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2... |
critical | 9.8 | — | Fasterxml / jackson-databind | 2019-10-07 | 2026-10-07 |
| CVE-2016-1000031 Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Cod... |
critical | 9.8 | — | Apache / commons fileupload | 2016-10-25 | 2026-10-07 |
| CVE-2016-1000027 Pivotal Spring Framework through 5.3.16 suffers from a potential remote code exe... |
critical | 9.8 | — | Vmware / spring framework | 2020-01-02 | 2026-10-07 |
| CVE-2025-14586 A vulnerability was determined in TOTOLINK X5000R 9.1.0cu.2089_B20211224. |
critical | 9.8 | — | Totolink / x5000r firmware | 2025-12-13 | 2026-10-07 |
| CVE-2025-14587 A vulnerability was identified in itsourcecode Online Pet Shop Management System... |
critical | 9.8 | — | Facebook-riares / online pet shop management system | 2025-12-13 | 2026-10-07 |
| CVE-2025-14588 A security flaw has been discovered in itsourcecode Student Management System 1.... |
critical | 9.8 | — | Angeljudesuarez / student management system | 2025-12-13 | 2026-10-07 |
| CVE-2025-14590 A security vulnerability has been detected in code-projects Prison Management Sy... |
critical | 9.8 | — | Carmelo / prison management system | 2025-12-13 | 2026-10-07 |
| CVE-2025-14619 A vulnerability was found in code-projects Student File Management System 1.0. |
critical | 9.8 | — | Fabian / student file management system | 2025-12-13 | 2026-10-07 |
| CVE-2025-14620 A vulnerability was determined in code-projects Student File Management System 1... |
critical | 9.8 | — | Fabian / student file management system | 2025-12-13 | 2026-10-07 |
| CVE-2025-36747 ShineLan-X contains a set of credentials for an FTP server was found within the... |
critical | 9.8 | — | Growatt / shine lan-x firmware | 2025-12-13 | 2026-10-07 |
| CVE-2025-36752 Growatt ShineLan-X communication dongle has an undocumented backup account with... |
critical | 9.8 | — | Growatt / shine lan-x firmware | 2025-12-13 | 2026-10-07 |
| CVE-2025-36753 The SWD debug interface on the Growatt ShineLan-X communication dongle is availa... |
critical | 9.8 | — | Growatt / shine lan-x firmware | 2025-12-13 | 2026-10-07 |
| CVE-2025-14621 A vulnerability was identified in code-projects Student File Management System 1... |
critical | 9.8 | — | Fabian / student file management system | 2025-12-13 | 2026-10-07 |
| CVE-2025-14622 A security flaw has been discovered in code-projects Student File Management Sys... |
critical | 9.8 | — | Fabian / student file management system | 2025-12-13 | 2026-10-07 |
| CVE-2025-14623 A weakness has been identified in code-projects Student File Management System 1... |
critical | 9.8 | — | Fabian / student file management system | 2025-12-13 | 2026-10-07 |
| CVE-2025-14637 A weakness has been identified in itsourcecode Online Pet Shop Management System... |
critical | 9.8 | — | Facebook-riares / online pet shop management system | 2025-12-13 | 2026-10-07 |
| CVE-2025-14638 A security vulnerability has been detected in itsourcecode Online Pet Shop Manag... |
critical | 9.8 | — | Facebook-riares / online pet shop management system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14639 A vulnerability was detected in itsourcecode Student Management System 1.0. |
critical | 9.8 | — | Angeljudesuarez / student management system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14640 A flaw has been found in code-projects Student File Management System 1.0. |
critical | 9.8 | — | Fabian / student file management system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14643 A vulnerability was found in code-projects Simple Attendance Record System 2.0. |
critical | 9.8 | — | Fabian / simple attendance record system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14644 A vulnerability was determined in itsourcecode Student Management System 1.0. |
critical | 9.8 | — | Angeljudesuarez / student management system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14645 A vulnerability was identified in code-projects Student File Management System 1... |
critical | 9.8 | — | Fabian / student file management system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14646 A security flaw has been discovered in code-projects Student File Management Sys... |
critical | 9.8 | — | Fabian / student file management system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14647 A weakness has been identified in code-projects Computer Book Store 1.0. |
critical | 9.8 | — | Carmelo / computer book store | 2025-12-14 | 2026-10-07 |
| CVE-2025-14649 A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. |
critical | 9.8 | — | Admerc / online cake ordering system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14650 A flaw has been found in itsourcecode Online Cake Ordering System 1.0. |
critical | 9.8 | — | Admerc / online cake ordering system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14652 A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. |
critical | 9.8 | — | Admerc / online cake ordering system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14653 A vulnerability was determined in itsourcecode Student Management System 1.0. |
critical | 9.8 | — | Angeljudesuarez / student management system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14659 A vulnerability was detected in D-Link DIR-860LB1 and DIR-868LB1 203b01/203b03. |
critical | 9.8 | — | Dlink / dir-868l b1 firmware | 2025-12-14 | 2026-10-07 |
| CVE-2025-14661 A vulnerability has been found in itsourcecode Student Managemen System 1.0. |
critical | 9.8 | — | Angeljudesuarez / student management system | 2025-12-14 | 2026-10-07 |
| CVE-2025-14704 A vulnerability was found in Shiguangwu sgwbox N3 2.0.25. |
critical | 9.8 | — | Sgwbox / n3 firmware | 2025-12-15 | 2026-10-07 |
| CVE-2025-14710 A vulnerability was detected in FantasticLBP Hotels Server up to 67b44df162fab26... |
critical | 9.8 | — | Fantasticlbp / hotels server | 2025-12-15 | 2026-10-07 |
| CVE-2025-14711 A flaw has been found in FantasticLBP Hotels Server up to 67b44df162fab26df209bd... |
critical | 9.8 | — | Fantasticlbp / hotels server | 2025-12-15 | 2026-10-07 |
| CVE-2025-64725 Weblate is a web based localization tool. |
critical | 9.8 | — | Weblate / weblate | 2025-12-15 | 2026-10-07 |
| CVE-2025-67744 DeepChat is an open-source artificial intelligence agent platform that unifies m... |
critical | 9.6 | — | Thinkinai / deepchat | 2025-12-16 | 2026-10-07 |
| CVE-2025-59385 An authentication bypass by spoofing vulnerability has been reported to affect s... |
critical | 9.8 | — | Qnap / qts | 2025-12-16 | 2026-10-07 |
| CVE-2025-62849 An SQL injection vulnerability has been reported to affect several QNAP operatin... |
critical | 9.8 | — | Qnap / qts | 2025-12-16 | 2026-10-07 |
| CVE-2026-106227 Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote... |
critical | 9.6 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.