October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,559
Critical
3,293
High
7,938
Medium
7,629
Low
740
Severity not reported
4,959
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-116520 The PPWP – Password Protect Pages plugin for WordPress is vulnerable to Stored C... |
high | 7.2 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-109234 The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Script... |
high | 7.2 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-109997 The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & A... |
high | 7.2 | — | — | 2026-10-31 | 2026-10-31 |
| CVE-2026-87356 Vulnerability in the Applications Platform Engineering product of Oracle E-Busin... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-31 |
| CVE-2026-91917 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input... |
high | 8.0 | — | — | 2026-10-30 | 2026-10-31 |
| CVE-2026-91913 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutra... |
high | 8.8 | — | — | 2026-10-30 | 2026-10-31 |
| CVE-2026-76028 Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-10-31 |
| CVE-2026-76029 Memory corruption in Network in Google Chrome prior to 156.0.8078.79 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-10-31 |
| CVE-2026-76030 Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-10-31 |
| CVE-2026-76031 Use after free in Input in Google Chrome prior to 156.0.8078.79 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-10-31 |
| CVE-2026-84243 The gettext family of functions in the GNU C Library version 2.0 and later accep... |
high | 7.0 | — | — | 2026-10-30 | 2026-10-31 |
| CVE-2026-76025 Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-10-31 |
| CVE-2026-76026 Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-10-31 |
| CVE-2026-119528 A flaw was found in GIMP. |
high | 7.8 | — | — | 2026-10-30 | 2026-10-31 |
| CVE-2026-119267 Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-10-31 |
| CVE-2026-119268 Integer overflow in Editing in Google Chrome prior to 156.0.8078.79 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-10-31 |
| CVE-2026-119269 Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-10-31 |
| CVE-2026-119270 Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.7... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-10-31 |
| CVE-2026-119271 Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-10-31 |
| CVE-2026-119262 Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-10-31 |
| CVE-2026-119264 Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remo... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-10-31 |
| CVE-2026-119265 Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a rem... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-10-31 |
| CVE-2026-119266 Use after free in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-10-31 |
| CVE-2026-119260 Use after free in Frames in Google Chrome prior to 156.0.8078.79 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-30 | 2026-10-31 |
| CVE-2026-118696 In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026... |
high | 8.0 | — | — | 2026-10-30 | 2026-10-31 |
| CVE-2026-111357 Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked brok... |
high | 7.0 | Listed | Ivanti / connect secure | 2026-10-15 | 2026-10-31 |
| CVE-2026-111504 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutra... |
high | 7.2 | — | — | 2026-10-30 | 2026-10-31 |
| CVE-2026-111505 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutra... |
high | 8.8 | — | — | 2026-10-30 | 2026-10-31 |
| CVE-2026-101682 Vulnerability in the Applications DBA product of Oracle E-Business Suite (compon... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-31 |
| CVE-2026-101213 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privil... |
high | 7.8 | — | — | 2026-10-30 | 2026-10-31 |
| CVE-2026-101214 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutra... |
high | 7.2 | — | — | 2026-10-30 | 2026-10-31 |
| CVE-2026-101210 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutra... |
high | 7.2 | — | — | 2026-10-30 | 2026-10-31 |
| CVE-2026-116896 REDAXO before 5.21.5 contains a missing authorization vulnerability in the backu... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-31 |
| CVE-2026-116880 Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site request forgery... |
high | 7.1 | — | — | 2026-10-27 | 2026-10-31 |
| CVE-2026-116876 Semantic MediaWiki from 2.5.0 before 7.3.1 contains an improper authorization vu... |
high | 7.1 | — | — | 2026-10-27 | 2026-10-31 |
| CVE-2026-116872 Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic complexity vu... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-31 |
| CVE-2026-116748 Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in hand... |
high | 8.8 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-116811 OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime... |
high | 8.8 | — | — | 2026-10-27 | 2026-10-31 |
| CVE-2026-116816 llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability... |
high | 7.8 | — | — | 2026-10-27 | 2026-10-31 |
| CVE-2026-116623 A vulnerability was detected in code-projects Simple Content Management System 1... |
high | 7.3 | — | — | 2026-10-27 | 2026-10-31 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.