October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
16,212
Critical
1,207
High
5,399
Medium
5,736
Low
600
Severity not reported
3,270
In CISA KEV
17
Most affected vendors (by CPE data where available): microsoft (1078), google (711), ibm (140), oracle (117), adobe (110), broadcom (61), apache (45), freerdp (42), linuxfoundation (41), dell (40)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-104252 Vitess is a database clustering system for horizontal scaling of MySQL. |
critical | 9.8 | — | Linuxfoundation / vitess | 2026-10-13 | 2026-10-23 |
| CVE-2026-106501 Backstage is an open framework for building developer portals. |
critical | 9.6 | — | Linuxfoundation / backstage\/plugin-scaffolder-backend | 2026-10-06 | 2026-10-13 |
| CVE-2026-106486 Backstage is an open framework for building developer portals. |
critical | 9.9 | — | Linuxfoundation / backstage\/plugin-scaffolder-backend-module-bitbucket-cloud | 2026-10-06 | 2026-10-23 |
| CVE-2026-106558 Backstage is an open framework for building developer portals. |
high | 8.8 | — | Linuxfoundation / backstage plugin-techdocs-node | 2026-10-07 | 2026-10-13 |
| CVE-2026-106510 Backstage is an open framework for building developer portals. |
high | 7.7 | — | Linuxfoundation / backstage plugin-techdocs-node | 2026-10-07 | 2026-10-13 |
| CVE-2026-106556 Backstage is an open framework for building developer portals. |
high | 7.7 | — | Linuxfoundation / backstage | 2026-10-07 | 2026-10-13 |
| CVE-2026-106509 Backstage is an open framework for building developer portals. |
high | 8.8 | — | Linuxfoundation / backstage plugin-techdocs-node | 2026-10-06 | 2026-10-09 |
| CVE-2026-106500 Backstage is an open framework for building developer portals. |
high | 8.5 | — | Linuxfoundation / backstage\/plugin-scaffolder-backend | 2026-10-06 | 2026-10-13 |
| CVE-2026-106503 Backstage is an open framework for building developer portals. |
high | 8.1 | — | Linuxfoundation / backstage\/plugin-scaffolder-backend | 2026-10-06 | 2026-10-13 |
| CVE-2026-106505 Backstage is an open framework for building developer portals. |
high | 8.5 | — | Linuxfoundation / backstage plugin-techdocs-node | 2026-10-06 | 2026-10-09 |
| CVE-2026-106498 Backstage is an open framework for building developer portals. |
high | 7.7 | — | Linuxfoundation / backstage plugin-catalog-backend | 2026-10-06 | 2026-10-16 |
| CVE-2026-106488 Backstage is an open framework for building developer portals. |
high | 8.1 | — | Linuxfoundation / backstage\/plugin-auth-backend-module-oidc-provider | 2026-10-06 | 2026-10-22 |
| CVE-2026-106457 Backstage is an open framework for building developer portals. |
high | 8.1 | — | Linuxfoundation / backstage\/plugin-auth-backend-module-cloudflare-access-provider | 2026-10-06 | 2026-10-27 |
| CVE-2026-106459 Backstage is an open framework for building developer portals. |
high | 8.5 | — | Linuxfoundation / backstage\/plugin-scaffolder-backend-module-sentry | 2026-10-06 | 2026-10-13 |
| CVE-2026-106455 Backstage is an open framework for building developer portals. |
high | 7.7 | — | Linuxfoundation / backstage plugin-techdocs-node | 2026-10-06 | 2026-10-13 |
| CVE-2026-106559 Backstage is an open framework for building developer portals. |
medium | 6.5 | — | Linuxfoundation / backstage\/plugin-scaffolder-backend-module-confluence-to-markdown | 2026-10-07 | 2026-10-16 |
| CVE-2026-106560 Backstage is an open framework for building developer portals. |
medium | 6.5 | — | Linuxfoundation / backstage\/plugin-scaffolder-backend-module-confluence-to-markdown | 2026-10-07 | 2026-10-16 |
| CVE-2026-106561 Backstage is an open framework for building developer portals. |
medium | 5.0 | — | Linuxfoundation / backstage\/plugin-kubernetes-backend | 2026-10-07 | 2026-10-16 |
| CVE-2026-106562 Backstage is an open framework for building developer portals. |
medium | 4.3 | — | Linuxfoundation / backstage\/plugin-search-backend | 2026-10-07 | 2026-10-16 |
| CVE-2026-106563 Backstage is an open framework for building developer portals. |
medium | 6.5 | — | Linuxfoundation / backstage\/plugin-kubernetes-backend | 2026-10-07 | 2026-10-16 |
| CVE-2026-106507 Backstage is an open framework for building developer portals. |
medium | 6.5 | — | Linuxfoundation / backstage plugin-techdocs-node | 2026-10-06 | 2026-10-09 |
| CVE-2026-106508 Backstage is an open framework for building developer portals. |
medium | 6.5 | — | Linuxfoundation / backstage plugin-techdocs-node | 2026-10-06 | 2026-10-09 |
| CVE-2026-106502 Backstage is an open framework for building developer portals. |
medium | 5.3 | — | Linuxfoundation / backstage\/plugin-scaffolder-backend | 2026-10-06 | 2026-10-13 |
| CVE-2026-106504 Backstage is an open framework for building developer portals. |
medium | 6.5 | — | Linuxfoundation / backstage\/plugin-scaffolder-backend | 2026-10-06 | 2026-10-13 |
| CVE-2026-106506 Backstage is an open framework for building developer portals. |
medium | 5.3 | — | Linuxfoundation / backstage\/plugin-scaffolder-backend | 2026-10-06 | 2026-10-09 |
| CVE-2026-106496 Backstage is an open framework for building developer portals. |
medium | 6.5 | — | Linuxfoundation / backstage plugin-catalog-backend | 2026-10-06 | 2026-10-16 |
| CVE-2026-106497 Backstage is an open framework for building developer portals. |
medium | 4.3 | — | Linuxfoundation / backstage plugin-catalog-backend | 2026-10-06 | 2026-10-16 |
| CVE-2026-106499 Backstage is an open framework for building developer portals. |
medium | 4.9 | — | Linuxfoundation / backstage\/plugin-scaffolder-backend | 2026-10-06 | 2026-10-15 |
| CVE-2026-106491 Backstage is an open framework for building developer portals. |
medium | 6.4 | — | Linuxfoundation / backstage\/plugin-proxy-backend | 2026-10-06 | 2026-10-22 |
| CVE-2026-106492 Backstage is an open framework for building developer portals. |
medium | 6.5 | — | Linuxfoundation / backstage\/backend-defaults | 2026-10-06 | 2026-10-22 |
| CVE-2026-106493 Backstage is an open framework for building developer portals. |
medium | 4.1 | — | Linuxfoundation / backstage | 2026-10-06 | 2026-10-22 |
| CVE-2026-106494 Backstage is an open framework for building developer portals. |
medium | 4.9 | — | Linuxfoundation / backstage\/backend defaults | 2026-10-06 | 2026-10-22 |
| CVE-2026-106462 Backstage is an open framework for building developer portals. |
medium | 6.4 | — | Linuxfoundation / backstage\/plugin-scaffolder-backend | 2026-10-06 | 2026-10-22 |
| CVE-2026-106463 Backstage is an open framework for building developer portals. |
medium | 5.4 | — | Linuxfoundation / backstage\/plugin-catalog-backend-module-gitlab | 2026-10-06 | 2026-10-22 |
| CVE-2026-106487 Backstage is an open framework for building developer portals. |
medium | 5.0 | — | Linuxfoundation / backstage\/plugin-kubernetes-backend | 2026-10-06 | 2026-10-22 |
| CVE-2026-106489 Backstage is an open framework for building developer portals. |
medium | 6.5 | — | Linuxfoundation / backstage\/plugin-techdocs-backend | 2026-10-06 | 2026-10-22 |
| CVE-2026-106490 Backstage is an open framework for building developer portals. |
medium | 6.5 | — | Linuxfoundation / backstage\/plugin-techdocs-backend | 2026-10-06 | 2026-10-22 |
| CVE-2026-106458 Backstage is an open framework for building developer portals. |
medium | 6.5 | — | Linuxfoundation / backstage\/plugin-catalog-backend-module-bitbucket-server | 2026-10-06 | 2026-10-27 |
| CVE-2026-106460 Backstage is an open framework for building developer portals. |
medium | 6.8 | — | Linuxfoundation / backstage\/plugin-auth-node | 2026-10-06 | 2026-10-27 |
| CVE-2026-106461 Backstage is an open framework for building developer portals. |
medium | 4.3 | — | Linuxfoundation / backstage\/plugin-scaffolder-backend | 2026-10-06 | 2026-10-23 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.