October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,479
Critical
1,340
High
5,869
Medium
6,256
Low
648
Severity not reported
3,366
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-94578 Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerab... |
high | 8.8 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-94582 A memory buffer overflow vulnerability exists in the internal diagnostic and rou... |
high | 7.8 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87671 An out-of-bounds memory read vulnerability exists in the web management daemon o... |
high | 7.5 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-13 |
| CVE-2026-87665 A stack-based buffer overflow vulnerability exists in the Internet Key Exchange... |
high | 7.5 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-13 |
| CVE-2026-82627 The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builde... |
high | 7.5 | — | — | 2026-10-08 | 2026-10-08 |
| CVE-2026-87682 Multiple OS Command Injection vulnerabilities exist in the management interface... |
high | 8.8 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-13 |
| CVE-2026-87683 Multiple stack-based buffer overflow vulnerabilities exist in the REST API manag... |
high | 8.8 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-13 |
| CVE-2026-87679 When Brocade Fabric OS versions before 10.0.1 processes trunk configuration oper... |
high | 7.2 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-13 |
| CVE-2026-87680 A command injection vulnerability in the REST API management interface of Brocad... |
high | 8.8 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-13 |
| CVE-2026-89322 Vault and Vault Enterprise did not consistently evaluate ACL policies against th... |
high | 7.2 | — | — | 2026-10-07 | 2026-10-09 |
| CVE-2026-107230 The AsyncHttpClient (AHC) library allows Java applications to easily execute HTT... |
high | 7.4 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-107232 The AsyncHttpClient (AHC) library allows Java applications to easily execute HTT... |
high | 7.5 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-105816 Vault and Vault Enterprise did not consistently verify that stored plugin catalo... |
high | 8.0 | — | — | 2026-10-07 | 2026-10-09 |
| CVE-2026-76282 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.8 | — | Splunk / splunk | 2026-10-07 | 2026-10-16 |
| CVE-2026-76283 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 7.6 | — | Splunk / splunk | 2026-10-07 | 2026-10-16 |
| CVE-2026-76266 In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux... |
high | 7.7 | — | Splunk / splunk | 2026-10-07 | 2026-10-14 |
| CVE-2026-107352 Missing authorization checks in Amazon Athena engine version 3 request handling... |
high | 7.7 | — | — | 2026-10-07 | 2026-10-11 |
| CVE-2026-107227 The AsyncHttpClient (AHC) library allows Java applications to easily execute HTT... |
high | 7.5 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-107161 A heap-based buffer overflow flaw was found in Cyrus SASL. |
high | 7.5 | — | — | 2026-10-07 | 2026-10-30 |
| CVE-2026-107219 Excelize is a Go language library for reading and writing Microsoft Excel spread... |
high | 7.5 | — | Excelize / excelize | 2026-10-07 | 2026-10-13 |
| CVE-2026-107223 Excelize is a Go language library for reading and writing Microsoft Excel spread... |
high | 7.5 | — | Excelize / excelize | 2026-10-07 | 2026-10-13 |
| CVE-2026-107217 Excelize is a Go language library for reading and writing Microsoft Excel spread... |
high | 7.5 | — | Excelize / excelize | 2026-10-07 | 2026-10-13 |
| CVE-2026-103371 Insertion of Sensitive Information into Log File in Apache Geode Web Management. |
high | 7.5 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-106164 In Progress® Telerik® Document Processing SpreadProcessing library, versions pri... |
high | 7.3 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-96335 Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Inc... |
high | 7.5 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-56851 The Nickname profile can panic with an out-of-bounds slice error when transformi... |
high | 7.5 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-107214 Excelize is a Go language library for reading and writing Microsoft Excel spread... |
high | 7.5 | — | Excelize / excelize | 2026-10-07 | 2026-10-13 |
| CVE-2026-107215 Excelize is a Go language library for reading and writing Microsoft Excel spread... |
high | 7.5 | — | Excelize / excelize | 2026-10-07 | 2026-10-13 |
| CVE-2026-107216 Excelize is a Go language library for reading and writing Microsoft Excel spread... |
high | 7.5 | — | Excelize / excelize | 2026-10-07 | 2026-10-13 |
| CVE-2026-107212 Excelize is a Go language library for reading and writing Microsoft Excel spread... |
high | 7.5 | — | Excelize / excelize | 2026-10-07 | 2026-10-13 |
| CVE-2026-94662 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-94670 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-95534 Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited... |
high | 8.8 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-95595 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-76484 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.8 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-76470 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.8 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-76472 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.8 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-76467 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 7.5 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-76468 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.2 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-76469 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 7.4 | — | — | 2026-10-07 | 2026-10-08 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.