October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,457
Critical
1,335
High
5,835
Medium
6,249
Low
648
Severity not reported
3,390
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-105901 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
high | 8.8 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-105994 ColdFusion is affected by an Incorrect Authorization vulnerability that could re... |
high | 7.7 | — | Adobe / coldfusion | 2026-10-13 | 2026-10-16 |
| CVE-2026-105443 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insuff... |
high | 8.2 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-105442 IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Serv... |
high | 7.5 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-104346 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-16 |
| CVE-2026-104347 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-16 |
| CVE-2026-104348 Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-16 |
| CVE-2026-103821 Substance3D - Designer is affected by an out-of-bounds write vulnerability that... |
high | 7.8 | — | Adobe / substance 3d designer | 2026-10-13 | 2026-10-15 |
| CVE-2026-101294 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM We... |
high | 8.7 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-100111 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-16 |
| CVE-2026-100112 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-10-13 | 2026-10-16 |
| CVE-2026-100127 Bridge is affected by an out-of-bounds write vulnerability that could result in... |
high | 7.8 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-100128 Bridge is affected by an out-of-bounds write vulnerability that could result in... |
high | 7.8 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-100129 Bridge is affected by an out-of-bounds write vulnerability that could result in... |
high | 7.8 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-86016 VNote is a note-taking platform. |
high | 8.2 | — | — | 2026-10-13 | 2026-10-29 |
| CVE-2026-86022 VNote is a note-taking platform. |
high | 7.0 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-70098 Missing authorization in Visual Studio Code allows an unauthorized attacker to e... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-63172 Omnispace Agora Project before 26.10.0 contains a broken access control vulnerab... |
high | 7.1 | — | — | 2026-10-13 | 2026-10-18 |
| CVE-2026-63174 Omnispace Agora Project before 26.10.0 contains a broken access control vulnerab... |
high | 8.1 | — | — | 2026-10-13 | 2026-10-17 |
| CVE-2026-63154 Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulne... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-63158 Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnera... |
high | 7.4 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-63159 Omnispace Agora Project before 26.10.0 contains a predictable password-reset tok... |
high | 7.4 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-63160 Omnispace Agora Project before 26.10.0 contains a vulnerability where the persis... |
high | 7.4 | — | — | 2026-10-13 | 2026-10-18 |
| CVE-2026-63161 Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-63162 Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability t... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-63163 Omnispace Agora Project before 26.10.0 contains a broken access control vulnerab... |
high | 7.5 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-63165 Omnispace Agora Project before 26.10.0 contains a SQL injection vulnerability in... |
high | 8.1 | — | — | 2026-10-13 | 2026-10-18 |
| CVE-2026-63149 Omnispace Agora Project before 26.10.0 contains an insecure randomness vulnerabi... |
high | 7.4 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-63152 Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vul... |
high | 8.1 | — | — | 2026-10-13 | 2026-10-17 |
| CVE-2026-63153 Omnispace Agora Project before 26.10.0 contains a broken access control vulnerab... |
high | 8.1 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-55601 MultiTail is a utility for monitoring multiple log files in one terminal. |
high | 7.3 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-16753 Incorrect authorization in the library-query execution endpoint in Lowcoder vers... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-20 |
| CVE-2026-110083 Adobe Experience Manager is affected by an Improper Neutralization of Special El... |
high | 7.1 | — | Adobe / experience manager | 2026-10-13 | 2026-10-31 |
| CVE-2026-110084 Adobe Experience Manager is affected by an XML Injection (aka Blind XPath Inject... |
high | 7.1 | — | Adobe / experience manager | 2026-10-13 | 2026-10-31 |
| CVE-2026-110005 The `periphery` agent's container-management functionality of Komodo version 2.2... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-20 |
| CVE-2026-106634 Adobe Experience Manager is affected by an Improper Limitation of a Pathname to... |
high | 7.7 | — | Adobe / experience manager | 2026-10-13 | 2026-10-30 |
| CVE-2026-103854 Dimension is affected by a Stack-based Buffer Overflow vulnerability that could... |
high | 7.8 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-103846 Dimension is affected by an Improper Neutralization of Input During Web Page Gen... |
high | 8.6 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-103847 Dimension is affected by an Untrusted Search Path vulnerability that could resul... |
high | 8.6 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-103851 Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability... |
high | 7.8 | — | — | 2026-10-13 | 2026-10-15 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.