October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
16,212
Critical
1,207
High
5,399
Medium
5,736
Low
600
Severity not reported
3,270
In CISA KEV
17
Most affected vendors (by CPE data where available): microsoft (1078), google (711), ibm (140), oracle (117), adobe (110), broadcom (61), apache (45), freerdp (42), linuxfoundation (41), dell (40)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-75994 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
critical | 9.6 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-20 |
| CVE-2026-106619 ColdFusion is affected by an Improper Input Validation vulnerability that could... |
critical | 9.0 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-15 |
| CVE-2026-106620 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
critical | 9.6 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-15 |
| CVE-2026-106621 ColdFusion is affected by an Improper Control of Generation of Code ('Code Injec... |
critical | 9.1 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-15 |
| CVE-2026-106622 ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability tha... |
critical | 10.0 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-15 |
| CVE-2026-106624 ColdFusion is affected by an Improper Control of Generation of Code ('Code Injec... |
critical | 10.0 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-15 |
| CVE-2026-106612 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
critical | 9.9 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-105899 ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vul... |
critical | 10.0 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-20 |
| CVE-2026-105903 ColdFusion is affected by an Improper Control of Generation of Code ('Code Injec... |
critical | 9.9 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-106626 Adobe Experience Manager is affected by an Improper Input Validation vulnerabili... |
critical | 9.1 | — | Adobe / experience manager | 2026-10-13 | 2026-10-26 |
| CVE-2026-106629 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
critical | 9.3 | — | Adobe / experience manager | 2026-10-13 | 2026-10-26 |
| CVE-2026-106630 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
critical | 9.3 | — | Adobe / experience manager | 2026-10-13 | 2026-10-26 |
| CVE-2026-105895 Adobe Experience Manager is affected by an Improper Input Validation vulnerabili... |
critical | 9.9 | — | Adobe / experience manager | 2026-10-13 | 2026-10-26 |
| CVE-2026-95632 CAI Content Credentials is affected by an Improper Verification of Cryptographic... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-95633 CAI Content Credentials is affected by an Improper Verification of Cryptographic... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-17 |
| CVE-2026-95634 CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vuln... |
high | 8.6 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-105902 CAI Content Credentials is affected by an Uncontrolled Resource Consumption vuln... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2026-106627 CAI Content Credentials is affected by an Uncontrolled Resource Consumption vuln... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2026-104345 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2026-103297 CAI Content Credentials is affected by an Improper Verification of Cryptographic... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2026-103296 CAI Content Credentials is affected by an Improper Verification of Cryptographic... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2026-100136 CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnera... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100137 CAI Content Credentials is affected by an Uncontrolled Resource Consumption vuln... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100138 CAI Content Credentials is affected by an Uncontrolled Resource Consumption vuln... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2026-100139 CAI Content Credentials is affected by an Uncontrolled Resource Consumption vuln... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-14 |
| CVE-2026-100119 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100120 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100121 CAI Content Credentials is affected by an Improper Certificate Validation vulner... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100122 CAI Content Credentials is affected by an Improper Certificate Validation vulner... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100123 CAI Content Credentials is affected by an Improper Certificate Validation vulner... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-17 |
| CVE-2026-100124 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100135 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100114 CAI Content Credentials is affected by an Improper Access Control vulnerability... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100115 CAI Content Credentials is affected by an Improper Access Control vulnerability... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100117 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-15 |
| CVE-2026-100118 CAI Content Credentials is affected by an Improper Certificate Validation vulner... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-17 |
| CVE-2026-100113 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
high | 7.5 | — | Adobe / c2pa | 2026-10-13 | 2026-10-17 |
| CVE-2026-97312 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-16 |
| CVE-2026-96521 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-28 |
| CVE-2026-96522 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-16 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.