October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,479
Critical
1,340
High
5,872
Medium
6,263
Low
649
Severity not reported
3,355
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-19947 The device multiplexer pseudo-driver in drivers/misc/devmux/devmux.c exposes two... |
medium | 5.3 | — | — | 2026-10-21 | 2026-10-23 |
| CVE-2026-114266 A security vulnerability has been detected in ProjectWorlds Advanced Library Man... |
medium | 6.3 | — | — | 2026-10-21 | 2026-10-23 |
| CVE-2026-114361 A vulnerability was detected in HarnessRouter up to 0.31.10. |
medium | 5.6 | — | — | 2026-10-21 | 2026-10-23 |
| CVE-2026-111401 Cross-Site Request Forgery (CSRF) vulnerability in Tailored Media Tailored Tools... |
medium | 6.5 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-92205 BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerabi... |
medium | 6.1 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-114264 A security flaw has been discovered in ProjectWorlds Advanced Library Management... |
medium | 4.7 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-114265 A weakness has been identified in ProjectWorlds Advanced Library Management Syst... |
medium | 6.3 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-114491 pdfmake 0.3.8 before 0.3.12 fails to apply the setLocalAccessPolicy() restrictio... |
medium | 5.3 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-114492 gin-vue-admin through 2.9.2 contains a path traversal vulnerability that allows... |
medium | 6.5 | — | — | 2026-10-21 | 2026-10-23 |
| CVE-2026-114133 Nuxt is an open-source web development framework for Vue.js. |
medium | 5.4 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-114176 Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webin... |
medium | 4.3 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-114128 Astro is a web framework for content-driven websites. |
medium | 6.5 | — | — | 2026-10-21 | 2026-10-23 |
| CVE-2026-114129 stream-json is a micro-library of stream components for processing JSON and JSON... |
medium | 6.2 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-114131 Nuxt is an open-source web development framework for Vue.js. |
medium | 6.5 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-112868 Authorization Bypass Through User-Controlled Key vulnerability in H5P H5P h5p al... |
medium | 4.3 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-76497 As part of Cisco's ongoing commitment to proactive security and product quality,... |
medium | 6.6 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-76487 A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco U... |
medium | 5.3 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-76489 Multiple Cisco products are affected by a vulnerability in the memory management... |
medium | 5.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-76435 A vulnerability in Cisco Expressway Series could allow an unauthenticated, remot... |
medium | 5.3 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-76445 Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection... |
medium | 5.3 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-76462 A vulnerability in the interprocess communication (IPC) channel of the Secure Fi... |
medium | 5.5 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-53986 Girafit camera app (Android and iOS) version 1.9.1 and earlier, and Girafit came... |
medium | 5.3 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-20179 Multiple Cisco products are affected by a vulnerability in the Snort 3 Generic R... |
medium | 5.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-20197 Multiple Cisco products are affected by a vulnerability in the Snort 3 Teredo De... |
medium | 5.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-20218 A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression... |
medium | 5.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-20221 Multiple Cisco products are affected by a vulnerability in the generic routing e... |
medium | 5.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-114260 A vulnerability has been found in oretnom23 file-management-system-php up to 2e3... |
medium | 6.5 | — | — | 2026-10-21 | 2026-10-23 |
| CVE-2026-20011 Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME... |
medium | 5.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-20019 Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow D... |
medium | 5.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-113799 Slack Morphism is a client library for Slack Web/Events API/Socket Mode and Bloc... |
medium | 5.3 | — | — | 2026-10-21 | 2026-10-30 |
| CVE-2026-113800 Electron is a framework for writing cross-platform desktop applications using Ja... |
medium | 5.4 | — | — | 2026-10-21 | 2026-10-23 |
| CVE-2026-114121 Electron is a framework for writing cross-platform desktop applications using Ja... |
medium | 5.4 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-113796 Electron is a framework for writing cross-platform desktop applications using Ja... |
medium | 4.2 | — | — | 2026-10-21 | 2026-10-23 |
| CVE-2026-113798 Electron is a framework for writing cross-platform desktop applications using Ja... |
medium | 5.4 | — | — | 2026-10-21 | 2026-10-28 |
| CVE-2026-114477 Missing authorization in the REST metrics route of Progressive Robot hMailServer... |
medium | 4.3 | — | — | 2026-10-21 | 2026-10-29 |
| CVE-2026-114478 Insufficient preservation of the original sender in the forwarding of Progressiv... |
medium | 5.9 | — | — | 2026-10-21 | 2026-10-29 |
| CVE-2026-114479 Not failing securely in the anti-virus attachment-stripping action of Progressiv... |
medium | 5.8 | — | — | 2026-10-21 | 2026-10-22 |
| CVE-2026-114470 Cross-site request forgery in the REST API of Progressive Robot hMailServer 6.0.... |
medium | 5.3 | — | — | 2026-10-21 | 2026-10-29 |
| CVE-2026-114471 Insertion of sensitive information into a log file in the SMTP server of Progres... |
medium | 4.7 | — | — | 2026-10-21 | 2026-10-29 |
| CVE-2026-114473 Incorrect authorization in the Sender Rewriting Scheme (SRS) of Progressive Robo... |
medium | 5.0 | — | — | 2026-10-21 | 2026-10-29 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.