October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,572
Critical
3,293
High
7,942
Medium
7,638
Low
740
Severity not reported
4,959
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-104368 The Export and Import Users and Customers plugin for WordPress is vulnerable to... |
high | 8.8 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-103672 The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2024-7557 A vulnerability was found in OpenShift AI that allows for authentication bypass... |
high | 8.8 | — | Redhat / openshift ai | 2024-08-12 | 2026-10-30 |
| CVE-2013-2056 A flaw was found in Red Hat Network Satellite. |
high | 7.5 | — | Redhat / satellite | 2013-07-31 | 2026-10-30 |
| CVE-2024-11218 A vulnerability was found in `podman build` and `buildah.` This issue occurs in... |
high | 8.6 | — | — | 2025-01-22 | 2026-10-30 |
| CVE-2012-5562 A flaw was found in rhn-proxy. |
high | 8.6 | — | Redhat / satellite | 2019-12-02 | 2026-10-30 |
| CVE-2026-45144 Chamilo LMS is an open-source learning management system. |
high | 8.9 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-45145 Chamilo LMS is an open-source learning management system. |
high | 7.5 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-61708 SOCFortress CoPilot focuses on providing a single pane of glass for all your sec... |
high | 8.5 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-61739 SOCFortress CoPilot focuses on providing a single pane of glass for all your sec... |
high | 7.5 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119287 Zuke is a code-first, strongly typed build automation system for Deno. |
high | 8.0 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119289 Zuke is a code-first, strongly typed build automation system for Deno. |
high | 7.1 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119115 Incorrect authorization in the issuer resolution logic in AWS Private CA Connect... |
high | 8.5 | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-111503 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutra... |
high | 7.1 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-91912 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-cod... |
high | 7.3 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-91914 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication... |
high | 7.1 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-92210 NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability... |
high | 7.2 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-97645 The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Script... |
high | 7.2 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-92203 Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forger... |
high | 7.7 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-92204 Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery... |
high | 7.7 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-92206 CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vu... |
high | 8.8 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-92207 MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability. |
high | 8.8 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-62146 A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influ... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-30 |
| CVE-2026-82987 There exists a screen capture endpoint in vCast media streaming service in ViewS... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-57117 PraisonAI is a multi-agent teams system. |
high | 8.8 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-55457 The Goobi viewer is a web application that allows digitised material to be displ... |
high | 7.4 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-114463 The webhook platform gateway in Nous Research Hermes Agent versions builds the s... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-113811 Algorithm::UrataniTakeda versions from 0.1.5 before 0.1.7 for Perl allow memory... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-112408 Missing verification of source of a communication channel in the default_bucket(... |
high | 8.1 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-10843 A flaw was found in the OpenShift Cloud Credential Operator Mint-mode IAM polici... |
high | 7.2 | — | — | 2026-06-04 | 2026-10-30 |
| CVE-2026-76291 In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user... |
high | 8.8 | — | Splunk / splunk | 2026-10-21 | 2026-10-30 |
| CVE-2026-76293 In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user... |
high | 7.2 | — | Splunk / splunk | 2026-10-21 | 2026-10-30 |
| CVE-2026-76298 In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold... |
high | 8.8 | — | Splunk / splunk | 2026-10-21 | 2026-10-30 |
| CVE-2026-84747 Interpretation conflict in the HTTP protocol implementation in Apache bRPC (vers... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-84748 Improper authorization in Apache bRPC (versions < 1.18.0) on all platforms allow... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-86146 Inconsistent interpretation of HTTP requests (HTTP request/response smuggling) i... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-86147 External control of file name or path and uncontrolled resource consumption in A... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-80463 Unbounded memory accumulation in the stream message reassembly path of Apache bR... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-81755 Uncontrolled resource consumption in the streaming RPC component of Apache bRPC... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-82210 Enforceable assertion in the streaming feature of Apache bRPC (version < 1.18.0)... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-30 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.