October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
16,204
Critical
1,207
High
5,399
Medium
5,731
Low
600
Severity not reported
3,267
In CISA KEV
17
Most affected vendors (by CPE data where available): microsoft (1078), google (711), ibm (140), oracle (117), adobe (110), broadcom (61), apache (45), freerdp (42), linuxfoundation (41), dell (40)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-118310 Improper input validation in Views in Google Chrome on on Windows prior to 156.0... |
critical | 9.6 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-118312 Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a rem... |
critical | 9.6 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-118305 Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a... |
critical | 9.6 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-116692 MLflow is an open source AI engineering platform for agents, large language mode... |
critical | 9.8 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-112352 Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability t... |
critical | 9.1 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-48360 Adobe Connect is affected by an Improper Control of Generation of Code ('Code In... |
critical | 9.6 | — | — | 2026-10-27 | 2026-10-29 |
| CVE-2026-114595 In EPICS Base release 7.0.10 and prior, an integer overflow in network request p... |
critical | 9.8 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-105489 Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia... |
critical | 9.9 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-105779 Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia... |
critical | 9.1 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-105780 Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerabi... |
critical | 9.9 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-105781 Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia... |
critical | 10.0 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-104350 Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XS... |
critical | 9.3 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-104351 Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of... |
critical | 9.9 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-104353 Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia... |
critical | 9.9 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-104354 Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia... |
critical | 9.1 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-116863 Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Newsletter... |
critical | 9.6 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-117564 nest-admin before 1.0.1 contains an authentication bypass vulnerability that all... |
critical | 9.8 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-65145 NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause... |
critical | 10.0 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-112362 @fastify/express is a Fastify plugin that runs Express middleware inside Fastify... |
critical | 9.1 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-117532 REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerabi... |
critical | 9.8 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-82119 OS Command Injection Vulnerability in HiRDB. |
critical | 9.8 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-82120 Heap-based Buffer Overflow Vulnerability in HiRDB. |
critical | 9.8 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-82122 Stack-based Buffer Overflow Vulnerability in HiRDB. |
critical | 9.4 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-86574 Heap-based Buffer Overflow Vulnerability in JP1/Base. |
critical | 9.8 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-86575 Stack-based Buffer Overflow Vulnerability in JP1 Products. |
critical | 9.4 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-86576 Heap-based Buffer Overflow Vulnerability in JP1 Products. |
critical | 9.4 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-86577 Out-of-bounds Write Vulnerability in JP1 Products. |
critical | 9.4 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-76935 Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System... |
critical | 9.4 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-76936 Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System... |
critical | 9.4 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-76937 Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System... |
critical | 9.4 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-76938 Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. |
critical | 9.8 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-76939 Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System... |
critical | 9.8 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-82116 Missing Authentication for Critical Function Vulnerability in HiRDB. |
critical | 9.8 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-82117 Authentication Bypass by Spoofing Vulnerability in HiRDB. |
critical | 9.8 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-82118 Stack-based Buffer Overflow Vulnerability in HiRDB. |
critical | 9.8 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-76932 Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System... |
critical | 9.4 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-76933 Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System... |
critical | 9.4 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-76934 Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System... |
critical | 9.8 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-92885 The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass... |
critical | 9.8 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-18450 The BMC does not correctly enforce integrity and encryption requirements for IPM... |
critical | 9.8 | — | — | 2026-10-27 | 2026-10-27 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.