October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,479
Critical
1,340
High
5,869
Medium
6,256
Low
648
Severity not reported
3,366
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-17001 The Import and export users and customers plugin for WordPress is vulnerable to... |
medium | 6.4 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-76666 A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memor... |
medium | 4.7 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-76667 A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memor... |
medium | 5.7 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-14572 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordP... |
medium | 6.4 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-76664 A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memor... |
medium | 6.4 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-76662 A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corrupti... |
medium | 5.9 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-110909 Wheels CLI through 4.1.0 does not verify that the local development server answe... |
medium | 5.0 | — | — | 2026-10-15 | 2026-10-20 |
| CVE-2026-76656 A
vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated... |
medium | 5.3 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-110904 ApostropheCMS before 4.33.0 allows authentication bypass for REST API page readi... |
medium | 5.3 | — | — | 2026-10-15 | 2026-10-16 |
| CVE-2026-110809 A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. |
medium | 4.3 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-110872 Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of s... |
medium | 5.9 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-110866 Renovate before 44.61.3 contains a protection mechanism bypass vulnerability tha... |
medium | 4.7 | — | — | 2026-10-14 | 2026-10-20 |
| CVE-2026-110870 Nodemailer from 3.0.0 before 10.0.13 contains an improper input validation vulne... |
medium | 5.3 | — | — | 2026-10-14 | 2026-10-26 |
| CVE-2026-110871 Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-20 |
| CVE-2026-110860 GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodul... |
medium | 6.1 | — | — | 2026-10-14 | 2026-10-26 |
| CVE-2026-110855 GitPython before 3.2.0 contains an information disclosure vulnerability that all... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-110832 FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in w... |
medium | 6.5 | — | Freerdp / freerdp | 2026-10-14 | 2026-10-23 |
| CVE-2026-110834 FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerabili... |
medium | 6.5 | — | Freerdp / freerdp | 2026-10-14 | 2026-10-23 |
| CVE-2026-110835 FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a... |
medium | 5.8 | — | Freerdp / freerdp | 2026-10-14 | 2026-10-23 |
| CVE-2026-110836 FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http... |
medium | 6.5 | — | Freerdp / freerdp | 2026-10-14 | 2026-10-23 |
| CVE-2026-110807 A weakness has been identified in sgl-project SGLang up to 0.5.19. |
medium | 4.3 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-110829 FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in... |
medium | 6.5 | — | Freerdp / freerdp | 2026-10-14 | 2026-10-23 |
| CVE-2026-110831 FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive... |
medium | 4.3 | — | Freerdp / freerdp | 2026-10-14 | 2026-10-23 |
| CVE-2026-110698 A security vulnerability has been detected in Praat up to 7.0.02. |
medium | 6.3 | — | — | 2026-10-14 | 2026-10-20 |
| CVE-2026-110816 ### Summary
`qs.stringify` with `arrayFormat: 'comma'` throws `TypeError: Canno... |
medium | 5.3 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-110695 A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. |
medium | 6.3 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-110696 A weakness has been identified in itsmeravitejak Online-Examination-System up to... |
medium | 5.3 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-69194 FileRise is a self-hosted web-based file manager with multi-file upload, editing... |
medium | 4.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-77427 FileRise is a self-hosted web-based file manager with multi-file upload, editing... |
medium | 5.9 | — | — | 2026-10-14 | 2026-10-20 |
| CVE-2026-62664 FileRise is a self-hosted web-based file manager with multi-file upload, editing... |
medium | 5.4 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-69191 FileRise is a self-hosted web-based file manager with multi-file upload, editing... |
medium | 5.4 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-69193 FileRise is a self-hosted web-based file manager with multi-file upload, editing... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-57491 FileRise is a self-hosted web-based file manager with multi-file upload, editing... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-57493 FileRise is a self-hosted web-based file manager with multi-file upload, editing... |
medium | 6.8 | — | — | 2026-10-14 | 2026-10-20 |
| CVE-2026-110689 A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. |
medium | 5.3 | — | — | 2026-10-14 | 2026-10-20 |
| CVE-2026-110694 A vulnerability has been found in OAID Tengine up to 1.12.0. |
medium | 6.3 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-104109 FileRise is a self-hosted web-based file manager with multi-file upload, editing... |
medium | 6.8 | — | — | 2026-10-14 | 2026-10-29 |
| CVE-2026-104110 FileRise is a self-hosted web-based file manager with multi-file upload, editing... |
medium | 5.3 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-103988 FileRise is a self-hosted web-based file manager with multi-file upload, editing... |
medium | 5.4 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-104105 FileRise is a self-hosted web-based file manager with multi-file upload, editing... |
medium | 6.4 | — | — | 2026-10-14 | 2026-10-15 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.