October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,479
Critical
1,340
High
5,869
Medium
6,256
Low
648
Severity not reported
3,366
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-85301 Improper Authentication vulnerability in Apache Camel Keycloak component. |
medium | 4.8 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-85312 Improper Input Validation vulnerability in Apache Camel Core component. |
medium | 4.8 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-85313 Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Ca... |
medium | 4.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-85314 Improper Input Validation vulnerability in Apache Camel Mail component. |
medium | 6.5 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-85315 Generation of Error Message Containing Sensitive Information vulnerability in Ap... |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-85316 Insufficient Granularity of Access Control vulnerability in Apache Camel Platfor... |
medium | 4.8 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-85249 Improper Input Validation vulnerability in Apache Camel Tika component. |
medium | 6.5 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-85254 Improper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTT... |
medium | 6.5 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-85257 Generation of Error Message Containing Sensitive Information vulnerability in Ap... |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-85260 Insertion of Sensitive Information into Log File vulnerability in Apache Camel M... |
medium | 5.5 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-84180 Generation of Error Message Containing Sensitive Information vulnerability in Ap... |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-84181 Improper Authentication vulnerability in Apache Camel Shiro component. |
medium | 5.9 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-85243 Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypt... |
medium | 5.9 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-85245 Exposure of Data Element to Wrong Session vulnerability in Apache Camel Thrift c... |
medium | 5.9 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-85246 Generation of Error Message Containing Sensitive Information vulnerability in Ap... |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-85247 Improper Certificate Validation vulnerability in Apache Camel Knative component. |
medium | 5.9 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-85248 Concurrent Execution using Shared Resource with Improper Synchronization ('Race... |
medium | 5.9 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-84176 Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Ca... |
medium | 6.5 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-84178 Cross-Site Request Forgery (CSRF) vulnerability in Apache Camel OAuth component. |
medium | 6.1 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-78163 Server-Side Request Forgery (SSRF), Improper Limitation of a Pathname to a Restr... |
medium | 5.9 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-86589 Incorrect implementation of authentication algorithm vulnerability in Apache Ans... |
medium | 5.4 | — | — | 2026-10-19 | 2026-10-30 |
| CVE-2026-67249 A vulnerability in Apache Answer. |
medium | 5.4 | — | — | 2026-10-19 | 2026-10-26 |
| CVE-2026-68482 Missing Authorization vulnerability in Apache Answer. |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-30 |
| CVE-2026-71563 Missing Authorization vulnerability in Apache Answer. |
medium | 4.3 | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-111407 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
medium | 6.5 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112100 A vulnerability was determined in DeepPavlov up to 1.7.0. |
medium | 5.5 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-112101 A vulnerability was determined in BlackBeltTechnology pi-agent-dashboard up to 0... |
medium | 4.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112102 A vulnerability was detected in AXA Group NLP.js 4.27.0. |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-110898 Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for... |
medium | 6.4 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-108764 Server-Side request forgery (SSRF) vulnerability in Apache Kylin. |
medium | 6.5 | — | — | 2026-10-19 | 2026-10-30 |
| CVE-2026-108766 Missing authorization on jdbc source config update in Apache Kylin. |
medium | 6.5 | — | — | 2026-10-19 | 2026-10-30 |
| CVE-2026-108776 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti... |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-30 |
| CVE-2026-108780 Potential JDBC source configuration validation vulnerability in Apache Kylin. |
medium | 6.5 | — | — | 2026-10-19 | 2026-10-30 |
| CVE-2026-111438 在 openGauss-server 的 src/common/backend/libpq/hba.cpp 中，复制连接认证存在访问... |
medium | 6.5 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112098 A security flaw has been discovered in DeepPavlov up to 1.7.0. |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112091 A flaw has been found in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42... |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-112092 A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee... |
medium | 4.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112093 A vulnerability has been found in subhajitkhan online-clinic-management-system u... |
medium | 4.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112094 A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. |
medium | 5.5 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-111439 在 openGauss-server的 src/common/backend/utils/adt/genfile.cpp 模块中，内置函数... |
medium | 4.3 | — | — | 2026-10-19 | 2026-10-19 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.