October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,479
Critical
1,340
High
5,869
Medium
6,256
Low
648
Severity not reported
3,366
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-58841 In multiple functions of VirtualAudioControllerTest.java, there is a possible pe... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-58854 In multiple locations, there is a possible memory corruption due to type confusi... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-55266 In qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bounds write du... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-55269 In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety is... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-49937 In multiple functions of MessageQueueBase.h, there is a possible out of bounds r... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-28641 In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-28647 In updateState of DeviceAdminAppsPreferenceController.java, there is a possible... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-28648 In Settings, there is a possible permission bypass due to a confused deputy. |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-45524 In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due... |
high | 8.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-49878 In wpas_handle_robust_av_scs_recv_action of robust_av.c, there is a possible out... |
high | 7.2 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-49880 In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds wri... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-49885 In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-49933 In handle_le_monitor_device_event of msft.cc, there is a possible control-flow h... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-28625 In multiple locations, there is a possible permission bypass due to a logic erro... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-28640 In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java,... |
high | 7.8 | — | Google / android | 2026-10-05 | 2026-10-07 |
| CVE-2026-105642 Ghost is a Node.js content management system. |
high | 8.8 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105643 Ghost is a Node.js content management system. |
high | 7.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105634 Plane is an open-source project management tool. |
high | 8.1 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105635 Plane is an open-source project management tool. |
high | 7.4 | — | — | 2026-10-05 | 2026-10-05 |
| CVE-2026-105386 A vulnerability was identified in onetwothreeneth HospitalManagementSystem up to... |
high | 7.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105387 A security flaw has been discovered in girishsaraf Online-Appointment-Booking-Sy... |
high | 7.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-104712 Asymmetric resource consumption (amplification) vulnerability in Apache Struts. |
high | 7.5 | — | Apache / struts | 2026-10-05 | 2026-10-08 |
| CVE-2026-104714 Concurrent execution using shared resource with improper synchronization ('race... |
high | 8.8 | — | Apache / struts | 2026-10-05 | 2026-10-08 |
| CVE-2026-103334 Insertion of Sensitive Information Into Sent Data vulnerability in Etoile Web De... |
high | 7.5 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-103349 Deserialization of Untrusted Data vulnerability in Rymera Web Co Product Feed PR... |
high | 7.2 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-100515 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105629 Plane is an open-source project management tool. |
high | 7.1 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105630 Plane is an open-source project management tool. |
high | 8.7 | — | — | 2026-10-05 | 2026-10-05 |
| CVE-2026-105631 Plane is an open-source project management tool. |
high | 7.5 | — | — | 2026-10-05 | 2026-10-07 |
| CVE-2026-105633 Plane is an open-source project management tool. |
high | 7.1 | — | — | 2026-10-05 | 2026-10-05 |
| CVE-2026-105384 A vulnerability was found in UNION HospitalManagementSystem up to 9ef91ed6007314... |
high | 7.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105385 A vulnerability was determined in onetwothreeneth HospitalManagementSystem up to... |
high | 7.3 | — | — | 2026-10-05 | 2026-10-07 |
| CVE-2026-105628 Plane is an open-source project management tool. |
high | 7.6 | — | — | 2026-10-05 | 2026-10-05 |
| CVE-2026-104977 Plane is an open-source project management tool. |
high | 7.7 | — | — | 2026-10-05 | 2026-10-05 |
| CVE-2026-104978 Plane is an open-source project management tool. |
high | 8.2 | — | — | 2026-10-05 | 2026-10-07 |
| CVE-2026-104979 Plane is an open-source project management tool. |
high | 8.7 | — | — | 2026-10-05 | 2026-10-05 |
| CVE-2026-104971 Plane is an open-source project management tool. |
high | 8.5 | — | — | 2026-10-05 | 2026-10-05 |
| CVE-2026-104973 Plane is an open-source project management tool. |
high | 7.6 | — | — | 2026-10-05 | 2026-10-07 |
| CVE-2026-104974 Plane is an open-source project management tool. |
high | 8.1 | — | — | 2026-10-05 | 2026-10-05 |
| CVE-2026-104975 Plane is an open-source project management tool. |
high | 7.1 | — | — | 2026-10-05 | 2026-10-05 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.