October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,591
Critical
3,297
High
7,976
Medium
7,646
Low
740
Severity not reported
4,932
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-119283 joserfc is a Python library that provides an implementation of several JSON Obje... |
high | 7.5 | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-119290 Zuke is a code-first, strongly typed build automation system for Deno. |
high | 7.5 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-116622 The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerabl... |
high | 7.2 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-118238 The Tenda W18E web management server is vulnerable to OS command injection via t... |
high | 7.2 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-108762 Path-confinement bypass during metadata backup deletion in Apache Kylin. |
high | 7.3 | — | — | 2026-10-19 | 2026-10-30 |
| CVE-2026-107928 When curl is built with GnuTLS, a malicious WebSocket server can make curl
send... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2026-107929 When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is
se... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2026-104368 The Export and Import Users and Customers plugin for WordPress is vulnerable to... |
high | 8.8 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-103672 The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-30 |
| CVE-2024-7557 A vulnerability was found in OpenShift AI that allows for authentication bypass... |
high | 8.8 | — | Redhat / openshift ai | 2024-08-12 | 2026-10-30 |
| CVE-2013-2056 A flaw was found in Red Hat Network Satellite. |
high | 7.5 | — | Redhat / satellite | 2013-07-31 | 2026-10-30 |
| CVE-2024-11218 A vulnerability was found in `podman build` and `buildah.` This issue occurs in... |
high | 8.6 | — | — | 2025-01-22 | 2026-10-30 |
| CVE-2012-5562 A flaw was found in rhn-proxy. |
high | 8.6 | — | Redhat / satellite | 2019-12-02 | 2026-10-30 |
| CVE-2026-45144 Chamilo LMS is an open-source learning management system. |
high | 8.9 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-45145 Chamilo LMS is an open-source learning management system. |
high | 7.5 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-61708 SOCFortress CoPilot focuses on providing a single pane of glass for all your sec... |
high | 8.5 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-61739 SOCFortress CoPilot focuses on providing a single pane of glass for all your sec... |
high | 7.5 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119287 Zuke is a code-first, strongly typed build automation system for Deno. |
high | 8.0 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119289 Zuke is a code-first, strongly typed build automation system for Deno. |
high | 7.1 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-119115 Incorrect authorization in the issuer resolution logic in AWS Private CA Connect... |
high | 8.5 | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-111503 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutra... |
high | 7.1 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-91912 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-cod... |
high | 7.3 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-91914 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication... |
high | 7.1 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-92210 NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability... |
high | 7.2 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-97645 The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Script... |
high | 7.2 | — | — | 2026-10-30 | 2026-10-30 |
| CVE-2026-92203 Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forger... |
high | 7.7 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-92204 Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery... |
high | 7.7 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-92206 CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vu... |
high | 8.8 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-92207 MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability. |
high | 8.8 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-62146 A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influ... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-30 |
| CVE-2026-82987 There exists a screen capture endpoint in vCast media streaming service in ViewS... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-57117 PraisonAI is a multi-agent teams system. |
high | 8.8 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-55457 The Goobi viewer is a web application that allows digitised material to be displ... |
high | 7.4 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-114463 The webhook platform gateway in Nous Research Hermes Agent versions builds the s... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-113811 Algorithm::UrataniTakeda versions from 0.1.5 before 0.1.7 for Perl allow memory... |
high | 7.5 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-112408 Missing verification of source of a communication channel in the default_bucket(... |
high | 8.1 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-10843 A flaw was found in the OpenShift Cloud Credential Operator Mint-mode IAM polici... |
high | 7.2 | — | — | 2026-06-04 | 2026-10-30 |
| CVE-2026-76291 In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user... |
high | 8.8 | — | Splunk / splunk | 2026-10-21 | 2026-10-30 |
| CVE-2026-76293 In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user... |
high | 7.2 | — | Splunk / splunk | 2026-10-21 | 2026-10-30 |
| CVE-2026-76298 In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold... |
high | 8.8 | — | Splunk / splunk | 2026-10-21 | 2026-10-30 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.