October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,501
Critical
3,286
High
7,912
Medium
7,604
Low
740
Severity not reported
4,959
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2025-15078 A vulnerability was detected in itsourcecode Student Management System 1.0. |
critical | 9.8 | — | Angeljudesuarez / student management system | 2025-12-25 | 2026-10-07 |
| CVE-2025-59683 Pexip Infinity 15.0 through 38.0 before 38.1 has Improper Access Control in the... |
critical | 9.1 | — | Pexip / pexip infinity | 2025-12-25 | 2026-10-07 |
| CVE-2025-15089 A vulnerability has been found in UTT 进取 512W up to 1.7.7-171114. |
critical | 9.8 | — | Utt / 512w firmware | 2025-12-25 | 2026-10-07 |
| CVE-2025-15090 A vulnerability was found in UTT 进取 512W up to 1.7.7-171114. |
critical | 9.8 | — | Utt / 512w firmware | 2025-12-25 | 2026-10-07 |
| CVE-2025-15091 A vulnerability was determined in UTT 进取 512W up to 1.7.7-171114. |
critical | 9.8 | — | Utt / 512w firmware | 2025-12-26 | 2026-10-07 |
| CVE-2025-15092 A vulnerability was identified in UTT 进取 512W up to 1.7.7-171114. |
critical | 9.8 | — | Utt / 512w firmware | 2025-12-26 | 2026-10-07 |
| CVE-2025-15099 A vulnerability was identified in simstudioai sim up to 0.5.27. |
critical | 9.8 | — | Sim / sim | 2025-12-26 | 2026-10-07 |
| CVE-2025-66203 StreamVault is a video download integration solution. |
critical | 9.1 | — | Lemon8866 / streamvault | 2025-12-27 | 2026-10-07 |
| CVE-2025-54322 Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-e... |
critical | 9.8 | — | Xspeeder / sxzos | 2025-12-27 | 2026-10-07 |
| CVE-2026-18872 IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to st... |
critical | 9.3 | — | Ibm / financial transaction manager | 2026-09-23 | 2026-10-07 |
| CVE-2025-52691 SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnera... |
critical | 10.0 | Listed | SmarterTools / SmarterMail | 2025-12-29 | 2026-10-07 |
| CVE-2025-15127 A security vulnerability has been detected in FantasticLBP Hotels_Server up to 6... |
critical | 9.8 | — | Fantasticlbp / hotels server | 2025-12-28 | 2026-10-07 |
| CVE-2025-15165 A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. |
critical | 9.8 | — | Admerc / online cake ordering system | 2025-12-29 | 2026-10-07 |
| CVE-2025-15166 A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. |
critical | 9.8 | — | Admerc / online cake ordering system | 2025-12-29 | 2026-10-07 |
| CVE-2025-15167 A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. |
critical | 9.8 | — | Admerc / online cake ordering system | 2025-12-29 | 2026-10-07 |
| CVE-2025-15168 A vulnerability was identified in itsourcecode Student Management System 1.0. |
critical | 9.8 | — | Angeljudesuarez / student management system | 2025-12-29 | 2026-10-07 |
| CVE-2025-15068 Missing Authorization vulnerability in Gmission Web Fax allows Authentication Ab... |
critical | 9.8 | — | Gmission / web fax | 2025-12-29 | 2026-10-07 |
| CVE-2025-15069 Improper Authentication vulnerability in Gmission Web Fax allows Privilege Escal... |
critical | 9.8 | — | Gmission / web fax | 2025-12-29 | 2026-10-07 |
| CVE-2025-15181 A security flaw has been discovered in code-projects Refugee Food Management Sys... |
critical | 9.8 | — | Fabian / refugee food management system | 2025-12-29 | 2026-10-07 |
| CVE-2025-15182 A weakness has been identified in code-projects Refugee Food Management System 1... |
critical | 9.8 | — | Fabian / refugee food management system | 2025-12-29 | 2026-10-07 |
| CVE-2025-15183 A security vulnerability has been detected in code-projects Refugee Food Managem... |
critical | 9.8 | — | Fabian / refugee food management system | 2025-12-29 | 2026-10-07 |
| CVE-2025-15184 A vulnerability was detected in code-projects Refugee Food Management System 1.0... |
critical | 9.8 | — | Fabian / refugee food management system | 2025-12-29 | 2026-10-07 |
| CVE-2025-15185 A flaw has been found in code-projects Refugee Food Management System 1.0. |
critical | 9.8 | — | Fabian / refugee food management system | 2025-12-29 | 2026-10-07 |
| CVE-2025-15186 A vulnerability has been found in code-projects Refugee Food Management System 1... |
critical | 9.8 | — | Fabian / refugee food management system | 2025-12-29 | 2026-10-07 |
| CVE-2025-57460 File upload vulnerability in machsol machpanel 8.0.32 allows attacker to gain a... |
critical | 9.8 | — | Machsol / machpanel | 2025-12-29 | 2026-10-07 |
| CVE-2025-15195 A vulnerability was determined in code-projects Assessment Management 1.0. |
critical | 9.8 | — | Code-projects / assessment management | 2025-12-29 | 2026-10-07 |
| CVE-2025-69201 Tugtainer is a self-hosted app for automating updates of docker containers. |
critical | 9.8 | — | Quenary / tugtainer | 2025-12-29 | 2026-10-07 |
| CVE-2025-15196 A vulnerability was identified in code-projects Assessment Management 1.0. |
critical | 9.8 | — | Code-projects / assessment management | 2025-12-29 | 2026-10-07 |
| CVE-2025-15198 A weakness has been identified in code-projects College Notes Uploading System 1... |
critical | 9.8 | — | Code-projects / college notes uploading system | 2025-12-29 | 2026-10-07 |
| CVE-2025-15206 A flaw has been found in Campcodes Supplier Management System 1.0. |
critical | 9.8 | — | Campcodes / supplier management system | 2025-12-29 | 2026-10-07 |
| CVE-2025-15207 A vulnerability has been found in Campcodes Supplier Management System 1.0. |
critical | 9.8 | — | Campcodes / supplier management system | 2025-12-29 | 2026-10-07 |
| CVE-2025-15208 A security flaw has been discovered in code-projects Refugee Food Management Sys... |
critical | 9.8 | — | Fabian / refugee food management system | 2025-12-29 | 2026-10-07 |
| CVE-2025-15209 A weakness has been identified in code-projects Refugee Food Management System 1... |
critical | 9.8 | — | Fabian / refugee food management system | 2025-12-29 | 2026-10-07 |
| CVE-2025-15210 A security vulnerability has been detected in code-projects Refugee Food Managem... |
critical | 9.8 | — | Fabian / refugee food management system | 2025-12-30 | 2026-10-07 |
| CVE-2025-15211 A flaw has been found in code-projects Refugee Food Management System 1.0. |
critical | 9.8 | — | Fabian / refugee food management system | 2025-12-30 | 2026-10-07 |
| CVE-2025-15212 A vulnerability was detected in code-projects Refugee Food Management System 1.0... |
critical | 9.8 | — | Fabian / refugee food management system | 2025-12-30 | 2026-10-07 |
| CVE-2025-15102 DVP-12SE11T - Password Protection Bypass |
critical | 9.8 | — | Deltaww / dvp-12se11t firmware | 2025-12-30 | 2026-10-07 |
| CVE-2025-15103 DVP-12SE11T - Authentication Bypass via Partial Password Disclosure |
critical | 9.8 | — | Deltaww / dvp-12se11t firmware | 2025-12-30 | 2026-10-07 |
| CVE-2025-15243 A flaw has been found in code-projects Simple Stock System 1.0. |
critical | 9.8 | — | Carmelo / simple stock system | 2025-12-30 | 2026-10-07 |
| CVE-2025-15359 DVP-12SE11T - Out-of-bound memory write Vulnerability |
critical | 9.8 | — | Deltaww / dvp-12se11t firmware | 2025-12-30 | 2026-10-07 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.