October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,479
Critical
1,340
High
5,869
Medium
6,256
Low
648
Severity not reported
3,366
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-13138 Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Softwa... |
high | 8.6 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-109687 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti... |
high | 7.6 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-109114 A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-109115 A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-109116 A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-108179 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti... |
high | 7.6 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-101020 An incorrect permission assignment for critical resource issue exists in AssetVi... |
high | 7.8 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-102562 The AcyMailing plugin for WordPress is vulnerable to Stored Cross-Site Scripting... |
high | 7.2 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-103418 Firefox for iOS directly interpolated the page’s HTML language attribute into tr... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-102007 The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email... |
high | 7.2 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-108973 A vulnerability was determined in SourceCodester Contact Tracing System 1.0. |
high | 7.3 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-108974 A vulnerability was identified in SourceCodester E-Learning System 1.0. |
high | 7.3 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-108975 A security flaw has been discovered in SourceCodester Library Management System... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-103316 The macOS version of the DigiD app is not signed with Hardened Runtime. |
high | 7.1 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-108972 A vulnerability was found in SourceCodester Human Resource Management System 1.0... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-108970 A vulnerability was detected in itsmeravitejak Online-Examination-System up to e... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-108969 A security vulnerability has been detected in itsmeravitejak Online-Examination-... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-108968 A weakness has been identified in SourceCodester Performance Indicator System 1.... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-108966 A vulnerability was identified in SourceCodester Performance Indicator System 1.... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-108967 A security flaw has been discovered in SourceCodester Performance Indicator Syst... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-108965 A vulnerability was determined in SourceCodester Performance Indicator System 1.... |
high | 7.3 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-108964 A vulnerability was found in SourceCodester Performance Indicator System 1.0. |
high | 7.3 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-92883 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1... |
high | 8.7 | — | Gitlab / gitlab | 2026-10-13 | 2026-10-14 |
| CVE-2026-96893 GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 bef... |
high | 7.3 | — | Gitlab / gitlab | 2026-10-13 | 2026-10-14 |
| CVE-2026-35001 OpenS100 through commit 2b1dafc contains an integer overflow vulnerability in th... |
high | 7.0 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-81839 GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 bef... |
high | 7.7 | — | Gitlab / gitlab | 2026-10-13 | 2026-10-14 |
| CVE-2026-14814 GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.... |
high | 8.2 | — | Gitlab / gitlab | 2026-10-13 | 2026-10-14 |
| CVE-2026-16301 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7... |
high | 8.5 | — | Gitlab / gitlab | 2026-10-13 | 2026-10-14 |
| CVE-2026-108956 A vulnerability was identified in code-projects Online Reviewer System 1.0. |
high | 7.3 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-89113 SAP Commerce Cloud does not sufficiently validate certain user-supplied input be... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-89120 A regression caused by an API change in SAP ABAP Platform reintroduces a previou... |
high | 7.1 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-58249 SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in... |
high | 7.5 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-81858 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to caus... |
high | 8.1 | — | Ibm / i | 2026-10-13 | 2026-10-14 |
| CVE-2026-84418 IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attack... |
high | 7.4 | — | Ibm / datastage on cloud pak for data | 2026-10-12 | 2026-10-14 |
| CVE-2026-85457 IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker... |
high | 8.1 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-93891 IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authen... |
high | 7.6 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-93892 IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authen... |
high | 8.1 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-82108 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-10-12 | 2026-10-14 |
| CVE-2026-82096 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-10-12 | 2026-10-14 |
| CVE-2026-75782 IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker t... |
high | 7.8 | — | — | 2026-10-12 | 2026-10-13 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.