October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,479
Critical
1,340
High
5,869
Medium
6,256
Low
648
Severity not reported
3,366
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-112090 A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d6... |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-86791 The iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1.4.7 does... |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-94228 The TrueBooker WordPress plugin before 1.3.0 does not perform any capability che... |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-94229 The TrueBooker WordPress plugin before 1.3.0 does not verify that the requester... |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-94230 The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks... |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-94231 The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks... |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-94272 The Snap Finance WordPress plugin before 3.12.0 does not verify that a request t... |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-94294 The App Builder WordPress plugin before 5.7.1 does not require authentication or... |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112089 A security vulnerability has been detected in Dav-ee dairy-management-system 31a... |
medium | 4.7 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-74921 The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape... |
medium | 6.8 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-74922 The Document Gallery WordPress plugin through 5.1.1 does not verify the signatur... |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-103311 The Coinbase Commerce Payment Gateway for WooCommerce WordPress plugin through 1... |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-106010 The BDM Digital Payment Gateway WordPress plugin through 1.3.12 does not verify... |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112087 A weakness has been identified in itsourcecode Online Cake Ordering System 1.0. |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-112088 A weakness has been identified in Dav-ee dairy-management-system 31ace9692d1e1e6... |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-89286 The FormFlow for GoHighLevel (GHL) WordPress plugin through 1.0.0 does not restr... |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-91046 The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not p... |
medium | 4.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-91047 The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not p... |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-94273 The Snap Finance WordPress plugin through 3.11.0 does not verify that the paymen... |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-76739 A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250... |
medium | 4.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112083 A security flaw has been discovered in sgl-project SGLang up to 0.5.19. |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112086 A vulnerability was found in ESPnet up to 202610.post2. |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112081 A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-106028 The ActiveTrail for WooCommerce WordPress plugin through 1.2.6 does not perform... |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-106933 The Blaze Demo Importer WordPress plugin before 1.0.17 does not sanitize uploade... |
medium | 6.8 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-106014 The Gateway for Vantiv on WC WordPress plugin through 1.0.1 does not verify the... |
medium | 5.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112077 A vulnerability was detected in radareorg radare2 6.2.0/6.2.2. |
medium | 5.6 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-112078 A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up t... |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112079 A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112080 A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cf... |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112075 A weakness has been identified in unslothai unsloth up to 0.1.501-beta. |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112076 A security vulnerability has been detected in alexta69 MeTube up to 2026.09.28. |
medium | 5.6 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112045 A vulnerability was detected in donetick up to 0.1.82. |
medium | 5.4 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112073 A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd... |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-112074 A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a46... |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112043 A weakness has been identified in calcom cal.com and cal.diy up to 6.2.0. |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112040 A vulnerability was determined in diem-project diem up to 116974edfb9a5b8bd69cb1... |
medium | 4.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112034 A weakness has been identified in aircheng-org iWebShop-5 up to 5.16. |
medium | 4.3 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-112035 A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16... |
medium | 6.3 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112036 A vulnerability was detected in Artifex MuPDF up to 1.28.5. |
medium | 4.3 | — | — | 2026-10-19 | 2026-10-19 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.