Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

October 2026 CVE archive

Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in October 2026Materially updated (Critical / KEV)
Total records
17,479
Critical
1,340
High
5,869
Medium
6,256
Low
648
Severity not reported
3,366
In CISA KEV
20

Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-84854
In the WibuKey driver for Windows below Version 6.72, insufficient validation of...
high 7.0 —— 2026-10-062026-10-15
CVE-2026-98368
In the Linux kernel, the following vulnerability has been resolved: esp: downgr...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98369
In the Linux kernel, the following vulnerability has been resolved: xfrm: add m...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98364
In the Linux kernel, the following vulnerability has been resolved: xfrm: hold...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98366
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: v...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98367
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: C...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98357
In the Linux kernel, the following vulnerability has been resolved: IB/isert: w...
high 8.1 —— 2026-10-062026-10-19
CVE-2026-98359
In the Linux kernel, the following vulnerability has been resolved: RDMA/core:...
high 7.0 —— 2026-10-062026-10-19
CVE-2026-98360
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: i...
high 7.0 —— 2026-10-062026-10-19
CVE-2026-98361
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: R...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98349
In the Linux kernel, the following vulnerability has been resolved: wifi: libip...
high 7.1 —— 2026-10-062026-10-19
CVE-2026-98348
In the Linux kernel, the following vulnerability has been resolved: wifi: libip...
high 7.1 —— 2026-10-062026-10-19
CVE-2026-98339
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80...
high 8.8 —— 2026-10-062026-10-19
CVE-2026-98341
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98330
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80...
high 7.0 —— 2026-10-062026-10-19
CVE-2026-98331
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80...
high 7.0 —— 2026-10-062026-10-19
CVE-2026-98324
In the Linux kernel, the following vulnerability has been resolved: dmaengine:...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98315
In the Linux kernel, the following vulnerability has been resolved: ntfs: prote...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98318
In the Linux kernel, the following vulnerability has been resolved: smb: client...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98320
In the Linux kernel, the following vulnerability has been resolved: netfilter:...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98311
In the Linux kernel, the following vulnerability has been resolved: wifi: virt_...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98305
In the Linux kernel, the following vulnerability has been resolved: net: dsa: m...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98290
In the Linux kernel, the following vulnerability has been resolved: Bluetooth:...
high 7.5 —— 2026-10-062026-10-19
CVE-2026-98281
In the Linux kernel, the following vulnerability has been resolved: futex: Also...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98282
In the Linux kernel, the following vulnerability has been resolved: powerpc/iom...
high 8.8 —— 2026-10-062026-10-19
CVE-2026-98283
In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: B...
high 8.8 —— 2026-10-062026-10-19
CVE-2026-98276
In the Linux kernel, the following vulnerability has been resolved: net: lock t...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98260
In the Linux kernel, the following vulnerability has been resolved: exec: Clean...
high 7.8 —— 2026-10-062026-10-30
CVE-2026-98261
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix s...
high 8.1 —— 2026-10-062026-10-19
CVE-2026-98254
In the Linux kernel, the following vulnerability has been resolved: swiotlb: us...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98256
In the Linux kernel, the following vulnerability has been resolved: signal: Pre...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98257
In the Linux kernel, the following vulnerability has been resolved: rds: ib: us...
high 7.5 —— 2026-10-062026-10-19
CVE-2026-98258
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-t...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98251
In the Linux kernel, the following vulnerability has been resolved: openvswitch...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98252
In the Linux kernel, the following vulnerability has been resolved: RDMA/core:...
high 7.0 —— 2026-10-062026-10-19
CVE-2026-98253
In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma:...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98241
In the Linux kernel, the following vulnerability has been resolved: ipv6: xfrm:...
high 7.8 —— 2026-10-062026-10-19
CVE-2026-98243
In the Linux kernel, the following vulnerability has been resolved: dma-buf/dma...
high 7.1 —— 2026-10-062026-10-19
CVE-2026-98239
In the Linux kernel, the following vulnerability has been resolved: net: lan743...
high 8.1 —— 2026-10-062026-10-19
CVE-2026-98228
In the Linux kernel, the following vulnerability has been resolved: mips: selec...
high 7.8 —— 2026-10-062026-10-19

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.