October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,479
Critical
1,340
High
5,869
Medium
6,256
Low
648
Severity not reported
3,366
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-111092 In JetBrains YouTrack before 2026.2.19575
2026.3.16075
2026.3.16397
2026.3.16402... |
medium | 6.5 | — | — | 2026-10-15 | 2026-10-16 |
| CVE-2026-100347 kin-openapi is a Go project for handling OpenAPI files. |
medium | 5.3 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-100348 kin-openapi is a Go project for handling OpenAPI files. |
medium | 5.3 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-100350 kin-openapi is a Go project for handling OpenAPI files. |
medium | 5.3 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79843 A corrupted file may cause out-of-bounds read in HPE NonStop SQL/MX EXE under ce... |
medium | 6.5 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-95180 An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local att... |
medium | 5.5 | — | — | 2026-10-15 | 2026-10-16 |
| CVE-2026-79841 A buffer overflow vulnerability in HPE NonStop RDMA SERVICES NSK may cause out-o... |
medium | 5.8 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-59994 EspoCRM is an open source customer relationship management application. |
medium | 4.3 | — | — | 2026-10-15 | 2026-10-20 |
| CVE-2026-63130 EspoCRM is an open source customer relationship management application. |
medium | 5.5 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-77460 EspoCRM is an open source customer relationship management application. |
medium | 6.5 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-55154 EspoCRM is an open source customer relationship management application. |
medium | 5.4 | — | — | 2026-10-15 | 2026-10-16 |
| CVE-2026-46691 EspoCRM is an open source customer relationship management application. |
medium | 6.5 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-46694 EspoCRM is an open source customer relationship management application. |
medium | 6.5 | — | — | 2026-10-15 | 2026-10-16 |
| CVE-2026-46708 EspoCRM is an open source customer relationship management application. |
medium | 4.3 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-110936 Siemens Software Center Uncontrolled Search Path Element Vulnerability |
medium | 6.7 | Listed | Siemens / Software Center | 2026-10-15 | 2026-10-21 |
| CVE-2026-106150 In Progress® Kendo® UI for jQuery prior to 2026.3.1015, the Splitter and Window... |
medium | 5.4 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-106151 In Progress® Kendo® UI for jQuery versions starting with 2012.2.710 and prior to... |
medium | 5.4 | — | Progress / kendo ui | 2026-10-15 | 2026-10-20 |
| CVE-2026-106153 In Progress® Kendo® UI for jQuery prior to version 2026.3.1015, the Calendar and... |
medium | 5.4 | — | Progress / kendo ui | 2026-10-15 | 2026-10-20 |
| CVE-2026-106149 In Progress® Kendo® UI for jQuery prior to v2026.3.1015, the Menu component cons... |
medium | 5.4 | — | Progress / kendo ui | 2026-10-15 | 2026-10-20 |
| CVE-2026-106163 In Progress® Kendo® UI for jQuery versions starting with v2023.1.117 and prior t... |
medium | 6.5 | — | Progress / kendo ui | 2026-10-15 | 2026-10-20 |
| CVE-2026-106147 In Progress® Kendo® UI for jQuery releases starting with R1 2020 and prior to 20... |
medium | 5.4 | — | Progress / kendo ui | 2026-10-15 | 2026-10-20 |
| CVE-2026-106148 In Progress® Kendo® UI for jQuery prior to 2026.3.1015, the TabStrip, Menu, and... |
medium | 5.4 | — | Progress / kendo ui | 2026-10-15 | 2026-10-20 |
| CVE-2026-106157 In Progress® Kendo® UI for jQuery versions starting with 2019.2.514 and prior to... |
medium | 4.7 | — | Progress / kendo ui | 2026-10-15 | 2026-10-20 |
| CVE-2026-106158 In Progress® Kendo® UI for jQuery, in v2026.3.811 and earlier, the Scheduler Day... |
medium | 4.7 | — | Progress / kendo ui | 2026-10-15 | 2026-10-20 |
| CVE-2026-106159 In Progress® Kendo® UI for jQuery versions starting with 2022.3.1109 and prior t... |
medium | 4.7 | — | Progress / kendo ui | 2026-10-15 | 2026-10-20 |
| CVE-2026-106160 In Progress® Kendo® UI for jQuery prior to 2026.3.1015, Model.accept passes serv... |
medium | 5.4 | — | Progress / kendo ui | 2026-10-15 | 2026-10-20 |
| CVE-2026-106161 In Progress® Kendo® UI for jQuery releases starting with v2020.1.114 and prior t... |
medium | 5.4 | — | Progress / kendo ui | 2026-10-15 | 2026-10-20 |
| CVE-2026-106162 In Progress® Kendo® UI for jQuery versions starting with 2023.3.1010 and prior t... |
medium | 4.7 | — | Progress / kendo ui | 2026-10-15 | 2026-10-20 |
| CVE-2026-102389 Improper Control of Generation of Code ('Code Injection') vulnerability in WPMU... |
medium | 6.5 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-105882 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
medium | 6.5 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79836 A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to... |
medium | 6.4 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-8145 The WholesaleX – B2B & Wholesale Plugin for WooCommerce with Wholesale Prices pl... |
medium | 5.4 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-110726 In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `Cl... |
medium | 6.5 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79830 A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buf... |
medium | 6.6 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79831 A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary cod... |
medium | 6.6 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-17525 Incomplete cleanup vulnerability in ABB My Control System. |
medium | 5.2 | — | — | 2026-10-15 | 2026-10-16 |
| CVE-2026-34015 A path traversal vulnerability has been reported to affect Video Station. |
medium | 6.5 | — | Qnap / video station | 2026-10-15 | 2026-10-16 |
| CVE-2026-75559 The smartphone application "Vehicle Inspection Certificate Viewer" contains a vu... |
medium | 5.3 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79823 HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may... |
medium | 4.0 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-96614 "ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization... |
medium | 5.4 | — | — | 2026-10-15 | 2026-10-15 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.