October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,559
Critical
3,293
High
7,938
Medium
7,629
Low
740
Severity not reported
4,959
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-101000 A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. |
critical | 10.0 | — | — | 2026-09-28 | 2026-10-01 |
| CVE-2026-103244 ground-station versions before 0.8.0 contain an authentication bypass vulnerabil... |
critical | 9.8 | — | — | 2026-10-01 | 2026-10-01 |
| CVE-2026-96760 Authlib (v1.7.2 and below) contains a signature verification bypass vulnerabilit... |
critical | 9.8 | — | — | 2026-09-28 | 2026-10-01 |
| CVE-2026-75957 The Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform plugin for Wor... |
critical | 9.8 | — | — | 2026-10-01 | 2026-10-01 |
| CVE-2026-15989 The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to... |
critical | 9.8 | — | — | 2026-10-01 | 2026-10-01 |
| CVE-2026-103248 n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2... |
critical | 9.0 | — | — | 2026-10-01 | 2026-10-01 |
| CVE-2026-102427 Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaS... |
critical | 10.0 | — | Ordasoft / joomla cck | 2026-09-30 | 2026-10-01 |
| CVE-2026-16272 Use of less trusted source vulnerability in PayTR Payment and Electronic Money I... |
critical | 9.1 | — | — | 2026-09-09 | 2026-10-01 |
| CVE-2026-101148 The BackupSheep WordPress Backup Plugin WordPress plugin through 1.8 does not pr... |
critical | 10.0 | — | — | 2026-10-01 | 2026-10-01 |
| CVE-2026-76722 Uncontrolled Format string vulnerabilities exist in the affected interface of HP... |
critical | 9.8 | — | — | 2026-09-29 | 2026-10-01 |
| CVE-2026-76723 Buffer overflow vulnerabilities exist in the affected interface of HPE Networkin... |
critical | 9.6 | — | — | 2026-09-29 | 2026-10-01 |
| CVE-2026-76724 A command injection vulnerability exists in CLI of the affected HPE Networking I... |
critical | 9.6 | — | — | 2026-09-29 | 2026-10-01 |
| CVE-2026-76725 A vulnerability has been identified in a management protocol of HPE Networking I... |
critical | 9.6 | — | — | 2026-09-29 | 2026-10-01 |
| CVE-2026-77176 A flaw was found in Kata Containers. |
high | 8.1 | — | — | 2026-08-20 | 2026-10-31 |
| CVE-2026-114217 A flaw was found in konflux-ci. |
high | 8.6 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-116086 A flaw was found in konflux-ci. |
high | 8.8 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-116964 A flaw was found in konflux-ci. |
high | 8.4 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-117681 A flaw was found in konflux-ci. |
high | 8.0 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-120075 The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scri... |
high | 7.2 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-110530 The FeedWordPress plugin for WordPress is vulnerable to Stored Cross-Site Script... |
high | 7.2 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-93834 A use-after-free vulnerability was found in QEMU's 9pfs subsystem. |
high | 8.8 | — | — | 2026-09-25 | 2026-10-31 |
| CVE-2026-120070 The User Frontend – Membership, User Registration, User Profile, User Directory... |
high | 8.8 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-107759 The WPO365 | MICROSOFT 365 GRAPH MAILER plugin for WordPress is vulnerable to St... |
high | 7.2 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-118057 The Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Sc... |
high | 7.2 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2025-2241 A flaw was found in Hive, a component of Multicluster Engine (MCE) and Advanced... |
high | 8.2 | — | — | 2025-03-17 | 2026-10-31 |
| CVE-2026-103898 The Wp Social Login and Register Social Counter plugin for WordPress is vulnerab... |
high | 8.1 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-104012 The Rox Appointment Booking – Appointment Booking Scheduling Solution plugin for... |
high | 8.8 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-120040 The Mail logging & Catcher plugin for WordPress is vulnerable to Sensitive Infor... |
high | 7.5 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-118070 The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site S... |
high | 7.2 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-119065 The Shipping Zones by Drawing for WooCommerce plugin for WordPress is vulnerable... |
high | 7.2 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-119089 The ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketin... |
high | 7.2 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-119162 The User Submitted Posts – Enable Users to Submit Posts from the Front End plugi... |
high | 7.2 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-119163 The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & W... |
high | 7.5 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-115840 The VikRentCar Car Rental Management System plugin for WordPress is vulnerable t... |
high | 7.2 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-116522 The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cr... |
high | 7.2 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-116548 The VikRentCar Car Rental Management System plugin for WordPress is vulnerable t... |
high | 7.2 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-111254 The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scrip... |
high | 7.2 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-107750 The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnera... |
high | 7.2 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-107653 The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downlo... |
high | 7.2 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-119977 WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.... |
high | 8.1 | — | — | 2026-10-31 | 2026-10-31 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.