October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,479
Critical
1,340
High
5,869
Medium
6,256
Low
648
Severity not reported
3,366
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-76457 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.6 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-76458 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.6 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-76463 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.8 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-76453 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.8 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-76456 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.6 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-62251 Homer is open source telecom observability software. |
high | 8.1 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-20362 A vulnerability in the web-based management interface of Cisco Finesse could all... |
high | 7.2 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-106557 Backstage is an open framework for building developer portals. |
high | 7.7 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-107270 Gophish through 0.12.1 contains an insecure direct object reference vulnerabilit... |
high | 7.1 | — | — | 2026-10-07 | 2026-10-07 |
| CVE-2026-107205 LMCache through 0.5.5 contains a missing authentication vulnerability in the mul... |
high | 8.6 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-107207 LMCache through 0.5.5 contains a server-side request forgery vulnerability in it... |
high | 7.2 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-107209 ImageMagick is free and open-source software used for editing and manipulating d... |
high | 7.5 | — | Imagemagick / imagemagick | 2026-10-07 | 2026-10-21 |
| CVE-2026-106578 ImageMagick is free and open-source software used for editing and manipulating d... |
high | 7.5 | — | Imagemagick / imagemagick | 2026-10-07 | 2026-10-21 |
| CVE-2026-106579 ImageMagick is free and open-source software used for editing and manipulating d... |
high | 7.5 | — | Imagemagick / imagemagick | 2026-10-07 | 2026-10-21 |
| CVE-2026-106580 ImageMagick is free and open-source software used for editing and manipulating d... |
high | 8.2 | — | Imagemagick / imagemagick | 2026-10-07 | 2026-10-21 |
| CVE-2026-106573 ImageMagick is free and open-source software used for editing and manipulating d... |
high | 7.5 | — | Imagemagick / imagemagick | 2026-10-07 | 2026-10-21 |
| CVE-2026-106576 ImageMagick is free and open-source software used for editing and manipulating d... |
high | 7.5 | — | Imagemagick / imagemagick | 2026-10-07 | 2026-10-21 |
| CVE-2026-106565 ImageMagick is free and open-source software used for editing and manipulating d... |
high | 7.5 | — | Imagemagick / imagemagick | 2026-10-07 | 2026-10-22 |
| CVE-2026-106567 ImageMagick is free and open-source software used for editing and manipulating d... |
high | 7.5 | — | Imagemagick / imagemagick | 2026-10-07 | 2026-10-22 |
| CVE-2026-77214 libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in... |
high | 8.2 | — | — | 2026-10-07 | 2026-10-10 |
| CVE-2026-46570 In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_dow... |
high | 8.1 | — | Tuxera / ntfs-3g | 2026-10-07 | 2026-10-08 |
| CVE-2026-106558 Backstage is an open framework for building developer portals. |
high | 8.8 | — | Linuxfoundation / backstage plugin-techdocs-node | 2026-10-07 | 2026-10-13 |
| CVE-2026-106510 Backstage is an open framework for building developer portals. |
high | 7.7 | — | Linuxfoundation / backstage plugin-techdocs-node | 2026-10-07 | 2026-10-13 |
| CVE-2026-106556 Backstage is an open framework for building developer portals. |
high | 7.7 | — | Linuxfoundation / backstage | 2026-10-07 | 2026-10-13 |
| CVE-2025-70522 The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce a... |
high | 8.8 | — | — | 2026-10-07 | 2026-10-26 |
| CVE-2025-70517 The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce a... |
high | 8.8 | — | — | 2026-10-07 | 2026-10-26 |
| CVE-2026-46572 In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_cut_tail()... |
high | 7.4 | — | Tuxera / ntfs-3g | 2026-10-07 | 2026-10-08 |
| CVE-2026-46434 wger is a free, open-source workout and fitness manager. |
high | 7.1 | — | — | 2026-10-07 | 2026-10-07 |
| CVE-2026-46569 In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail()... |
high | 7.7 | — | Tuxera / ntfs-3g | 2026-10-07 | 2026-10-09 |
| CVE-2026-107183 llama.cpp before b11393 contains a use-after-free and double free vulnerability... |
high | 8.1 | — | — | 2026-10-07 | 2026-10-07 |
| CVE-2026-42616 In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ntfscat.c... |
high | 7.8 | — | Tuxera / ntfs-3g | 2026-10-07 | 2026-10-19 |
| CVE-2026-42617 In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ir_to_ib() in... |
high | 7.1 | — | Tuxera / ntfs-3g | 2026-10-07 | 2026-10-08 |
| CVE-2026-42618 In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() i... |
high | 7.1 | — | Tuxera / ntfs-3g | 2026-10-07 | 2026-10-08 |
| CVE-2026-43976 wger is a free, open-source workout and fitness manager. |
high | 7.1 | — | — | 2026-10-07 | 2026-10-07 |
| CVE-2026-107181 Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnera... |
high | 8.1 | — | — | 2026-10-07 | 2026-10-07 |
| CVE-2026-102257 A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC... |
high | 7.2 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-98374 In the Linux kernel, the following vulnerability has been resolved:
tcp: fix us... |
high | 8.8 | — | — | 2026-10-07 | 2026-10-24 |
| CVE-2026-102256 Post-authentication Improper Neutralization of Special Elements used in an OS Co... |
high | 7.8 | — | — | 2026-10-07 | 2026-10-08 |
| CVE-2026-106059 GitAhead through 2.7.1 on macOS contains a command injection vulnerability that... |
high | 8.8 | — | — | 2026-10-07 | 2026-10-10 |
| CVE-2026-42708 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti... |
high | 7.6 | — | — | 2026-10-07 | 2026-10-07 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.