October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,572
Critical
3,295
High
7,971
Medium
7,638
Low
740
Severity not reported
4,928
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-114715 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorre... |
high | 8.1 | — | Roundcube / webmail | 2026-10-22 | 2026-10-30 |
| CVE-2026-114716 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail hea... |
high | 8.5 | — | Roundcube / webmail | 2026-10-22 | 2026-10-30 |
| CVE-2026-101775 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (compon... |
high | 7.4 | — | Oracle / mysql cluster | 2026-10-20 | 2026-10-30 |
| CVE-2026-115713 Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elast... |
high | 7.5 | — | Elastic / elastic cloud enterprise | 2026-10-29 | 2026-10-30 |
| CVE-2026-114720 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP co... |
high | 7.1 | — | Roundcube / webmail | 2026-10-22 | 2026-10-30 |
| CVE-2026-63875 In the Linux kernel, the following vulnerability has been resolved:
arm64: tlb:... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63874 In the Linux kernel, the following vulnerability has been resolved:
net: mctp:... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2024-40637 dbt enables data analysts and engineers to transform their data using the same p... |
high | 7.3 | — | Getdbt / dbt-core | 2024-07-16 | 2026-10-30 |
| CVE-2026-63898 In the Linux kernel, the following vulnerability has been resolved:
USB: serial... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63899 In the Linux kernel, the following vulnerability has been resolved:
USB: serial... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63901 In the Linux kernel, the following vulnerability has been resolved:
USB: serial... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63902 In the Linux kernel, the following vulnerability has been resolved:
USB: serial... |
high | 7.1 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63903 In the Linux kernel, the following vulnerability has been resolved:
USB: serial... |
high | 7.1 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63904 In the Linux kernel, the following vulnerability has been resolved:
usb: usbtmc... |
high | 7.1 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63905 In the Linux kernel, the following vulnerability has been resolved:
usbip: vudc... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63906 In the Linux kernel, the following vulnerability has been resolved:
usb: musb:... |
high | 8.4 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63955 In the Linux kernel, the following vulnerability has been resolved:
mm/vmalloc:... |
high | 7.5 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63954 In the Linux kernel, the following vulnerability has been resolved:
hpfs: fix a... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63951 In the Linux kernel, the following vulnerability has been resolved:
zram: fix u... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63957 In the Linux kernel, the following vulnerability has been resolved:
USB: serial... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63956 In the Linux kernel, the following vulnerability has been resolved:
USB: serial... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63907 In the Linux kernel, the following vulnerability has been resolved:
uio: uio_pc... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63909 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: OOB... |
high | 8.1 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63910 In the Linux kernel, the following vulnerability has been resolved:
dma-buf: fi... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63911 In the Linux kernel, the following vulnerability has been resolved:
xfrm: iptfs... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63918 In the Linux kernel, the following vulnerability has been resolved:
l2tp: use r... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63928 In the Linux kernel, the following vulnerability has been resolved:
USB: serial... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63930 In the Linux kernel, the following vulnerability has been resolved:
iio: buffer... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63934 In the Linux kernel, the following vulnerability has been resolved:
iio: gyro:... |
high | 7.1 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63943 In the Linux kernel, the following vulnerability has been resolved:
Input: xpad... |
high | 7.1 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63949 In the Linux kernel, the following vulnerability has been resolved:
auxdisplay:... |
high | 7.1 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-63950 In the Linux kernel, the following vulnerability has been resolved:
mm/rmap: in... |
high | 7.8 | — | Linux / linux kernel | 2026-07-19 | 2026-10-30 |
| CVE-2026-91217 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
high | 8.6 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91219 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
high | 8.6 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91228 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
high | 7.1 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91237 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
high | 7.5 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91238 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
high | 7.1 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-91239 Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (compo... |
high | 8.8 | — | Oracle / soa suite | 2026-10-20 | 2026-10-30 |
| CVE-2026-114396 Trudesk through 1.2.11 contains a server-side JavaScript injection vulnerability... |
high | 7.1 | — | Trudesk Project / trudesk | 2026-10-21 | 2026-10-30 |
| CVE-2026-114397 Trudesk through 1.2.11 contains a missing authentication vulnerability in debug... |
high | 7.4 | — | Trudesk Project / trudesk | 2026-10-21 | 2026-10-30 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.