October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,476
Critical
1,339
High
5,869
Medium
6,255
Low
648
Severity not reported
3,365
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-93581 User-controlled values are not sufficiently neutralized when included in CSV exp... |
medium | 6.1 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-109082 A flaw was found in the Client-Initiated Backchannel Authentication CIBA impleme... |
medium | 6.8 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-48211 An authenticated administrator can be induced to delete administrative Import/Ex... |
medium | 5.4 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-48212 An OTRS administrator can enter arbitrary JavaScript into the content of an OTRS... |
medium | 4.8 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-78356 The OTRS Agent Frontend configuration endpoint can be accessed without authentic... |
medium | 5.3 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-109080 SQL injection in the bulk license plate search of the Flock Night Shift hosted s... |
medium | 6.5 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-84166 The Hotel Booking WordPress plugin through 3.8 does not implement CSRF protectio... |
medium | 4.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-84167 The Hotel Booking WordPress plugin through 3.8 does not verify that a booking re... |
medium | 4.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-108803 A security vulnerability has been detected in y_project RuoYi up to 4.8.3. |
medium | 6.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-107193 A flaw has been found in **permission filters** in the **foreman** package. |
medium | 6.5 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-107203 An **incorrect authorization** flaw has been found in **network interface handli... |
medium | 5.4 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-107791 The WP Comment Cleaner WordPress plugin before 7.2 does not perform a capability... |
medium | 6.5 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-108800 A vulnerability was identified in yangzongzhuan RuoYi 4.8.3. |
medium | 4.3 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-108801 A security flaw has been discovered in prasathmani TinyFileManager up to 2.6. |
medium | 6.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-108796 A flaw has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. |
medium | 4.3 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-108797 A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. |
medium | 4.3 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-108795 A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. |
medium | 4.3 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-108790 A security flaw has been discovered in westboy CicadasCMS up to 2431154dac8d0735... |
medium | 4.7 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-108791 A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1... |
medium | 4.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-108794 A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 2026013... |
medium | 6.3 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-107437 GV-E-Map
Server V18.2.0A contains a plaintext database password embedded within... |
medium | 6.2 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-108789 A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. |
medium | 5.5 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-108788 A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. |
medium | 5.3 | — | — | 2026-10-12 | 2026-10-14 |
| CVE-2026-66085 In modem, there is a possible information disclosure due to missing filtering of... |
medium | 5.5 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-87765 In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardw... |
medium | 5.5 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-108782 A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. |
medium | 6.3 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-108784 A vulnerability was detected in macrozheng mall up to 1.0.3. |
medium | 6.5 | — | — | 2026-10-12 | 2026-10-14 |
| CVE-2026-108785 A flaw has been found in macrozheng mall up to 1.0.3. |
medium | 6.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-108786 A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5. |
medium | 6.3 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-108787 A vulnerability was found in houtini-ai voice-analyser-mcp up to 2.1.1. |
medium | 6.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-108779 A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. |
medium | 6.3 | — | — | 2026-10-12 | 2026-10-14 |
| CVE-2026-108781 A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. |
medium | 6.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-108774 A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. |
medium | 6.3 | — | — | 2026-10-12 | 2026-10-14 |
| CVE-2026-108775 A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. |
medium | 6.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-108777 A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. |
medium | 6.3 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-108778 A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39. |
medium | 6.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-108770 A weakness has been identified in Appwrite up to 2.3.0. |
medium | 5.3 | — | — | 2026-10-11 | 2026-10-13 |
| CVE-2026-108772 A security vulnerability has been detected in bleenco abstruse up to 2.1.0. |
medium | 5.3 | — | — | 2026-10-11 | 2026-10-15 |
| CVE-2026-108773 A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. |
medium | 6.3 | — | — | 2026-10-11 | 2026-10-13 |
| CVE-2026-108769 A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. |
medium | 4.3 | — | — | 2026-10-11 | 2026-10-14 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.