October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,476
Critical
1,339
High
5,869
Medium
6,255
Low
648
Severity not reported
3,365
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-108952 RT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy... |
medium | 4.6 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-109165 TDuck survey form through 6.0 contains a broken access control vulnerability tha... |
medium | 4.3 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-108834 A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. |
medium | 4.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-108835 A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1.9. |
medium | 4.4 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-108889 A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. |
medium | 4.4 | — | — | 2026-10-12 | 2026-10-14 |
| CVE-2026-108950 Open Source Social Network (OSSN) through 10.1 contains a missing authorization... |
medium | 5.3 | — | — | 2026-10-12 | 2026-10-18 |
| CVE-2026-108951 LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that... |
medium | 6.5 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-108831 A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2... |
medium | 6.3 | — | — | 2026-10-12 | 2026-10-14 |
| CVE-2026-108827 A vulnerability was determined in Zen Cart up to 2.2.2. |
medium | 4.1 | — | — | 2026-10-12 | 2026-10-14 |
| CVE-2026-108828 A vulnerability was identified in Zen Cart 2.2.2. |
medium | 4.1 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-108829 A security flaw has been discovered in Zen Cart up to 2.2.2. |
medium | 4.7 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-108830 A weakness has been identified in meetecho janus-gateway up to 1.4.2. |
medium | 4.2 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-108824 A flaw has been found in DataEase up to 3.0.0. |
medium | 6.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-108825 A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. |
medium | 5.4 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-108822 A vulnerability was detected in Kamailio up to 6.0.7/6.1.3. |
medium | 5.3 | — | — | 2026-10-12 | 2026-10-14 |
| CVE-2026-108820 A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. |
medium | 6.3 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-108821 A security vulnerability has been detected in Tencent WeKnora up to 0.8.1. |
medium | 6.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-108816 A vulnerability was found in agno-agi agno up to 3.0.6. |
medium | 6.3 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-108817 A vulnerability was determined in agno-agi agno up to 3.0.9. |
medium | 5.5 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-107863 Missing Authorization vulnerability in Codection Products Restricted Users for W... |
medium | 5.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-107864 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
medium | 6.5 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-107865 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
medium | 6.5 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-107866 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
medium | 6.5 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-107869 Missing Authorization vulnerability in WP Desk Flexible Subscriptions flexible-s... |
medium | 4.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-108168 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
medium | 6.5 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2023-25996 Insertion of Sensitive Information Into Sent Data vulnerability in Pluggabl LLC. |
medium | 6.5 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-107423 Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-m... |
medium | 4.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-108811 A weakness has been identified in WMCMS 4.446.1257. |
medium | 4.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-108812 A security vulnerability has been detected in SEMCMS up to 5.0. |
medium | 6.5 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-108813 A vulnerability was detected in SEMCMS up to 5.0. |
medium | 6.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-108814 A flaw has been found in SEMCMS up to 5.0. |
medium | 6.3 | — | — | 2026-10-12 | 2026-10-14 |
| CVE-2026-103356 Missing Authorization vulnerability in VillaTheme TMDS tmds-dropshipping-for-tem... |
medium | 5.4 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-106605 Improper Validation of Specified Quantity in Input vulnerability in WP Desk Flex... |
medium | 5.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-107427 Authorization Bypass Through User-Controlled Key vulnerability in NOUS Ouvert Ut... |
medium | 6.5 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-107429 Improper Validation of Specified Quantity in Input vulnerability in VideoWhisper... |
medium | 4.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-107430 Missing Authorization vulnerability in VideoWhisper.com VideoWhisper Site Manage... |
medium | 5.4 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-107432 Missing Authorization vulnerability in NOUS Ouvert Utile et Simple Event post ev... |
medium | 5.4 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-108810 A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. |
medium | 5.3 | — | — | 2026-10-12 | 2026-10-14 |
| CVE-2026-78358 Several administrative actions do not sufficiently validate whether a request wa... |
medium | 4.3 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-78359 OTRS does not sufficiently enforce the uniqueness of customer user identities ac... |
medium | 5.4 | — | — | 2026-10-12 | 2026-10-15 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.