October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,476
Critical
1,339
High
5,869
Medium
6,255
Low
648
Severity not reported
3,365
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-108696 CoreShop through 1.5.5 contains an authorization bypass vulnerability in the Ord... |
medium | 4.3 | — | — | 2026-10-11 | 2026-10-16 |
| CVE-2026-108700 1Panel-dev CordysCRM before 1.9.2 contains a missing authorization vulnerability... |
medium | 6.5 | — | — | 2026-10-11 | 2026-10-14 |
| CVE-2026-108701 1Panel-dev CordysCRM before 1.9.2 contains a missing authorization vulnerability... |
medium | 4.3 | — | — | 2026-10-11 | 2026-10-13 |
| CVE-2026-108702 1Panel-dev CordysCRM through 1.9.3 lacks a PROCESS_SETTING permission check on P... |
medium | 4.3 | — | — | 2026-10-11 | 2026-10-18 |
| CVE-2026-108703 CordysCRM through 1.9.3 contains a missing authorization vulnerability in POST /... |
medium | 5.4 | — | — | 2026-10-11 | 2026-10-14 |
| CVE-2026-108704 CordysCRM through 1.9.3 contains an authorization bypass vulnerability that allo... |
medium | 4.3 | — | — | 2026-10-11 | 2026-10-13 |
| CVE-2026-108690 mall4j through 4.0 contains an information disclosure vulnerability that allows... |
medium | 4.3 | — | — | 2026-10-11 | 2026-10-16 |
| CVE-2026-108691 mall4j through 4.0 contains an improper authorization vulnerability that allows... |
medium | 5.4 | — | — | 2026-10-11 | 2026-10-16 |
| CVE-2026-108692 1Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing authorization vu... |
medium | 6.5 | — | — | 2026-10-11 | 2026-10-14 |
| CVE-2026-108694 ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allow... |
medium | 6.5 | — | — | 2026-10-11 | 2026-10-18 |
| CVE-2026-108689 Wukong AICRM through 20260610 contains a missing authorization vulnerability tha... |
medium | 5.4 | — | — | 2026-10-11 | 2026-10-18 |
| CVE-2026-108688 Eladmin through 2.7 contains a missing authorization vulnerability in the LocalS... |
medium | 4.3 | — | — | 2026-10-11 | 2026-10-16 |
| CVE-2026-108679 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the se... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-13 |
| CVE-2026-108680 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allo... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108672 JeecgBoot through 3.9.5 contains an authorization bypass vulnerability in the ge... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-18 |
| CVE-2026-108673 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Ai... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108674 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Op... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-16 |
| CVE-2026-108675 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Sy... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108676 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Sy... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-13 |
| CVE-2026-108677 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /s... |
medium | 6.5 | — | — | 2026-10-10 | 2026-10-18 |
| CVE-2026-108678 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the qu... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108665 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Ai... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108666 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the de... |
medium | 5.4 | — | — | 2026-10-10 | 2026-10-13 |
| CVE-2026-108667 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allo... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-18 |
| CVE-2026-108668 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Ai... |
medium | 5.4 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108669 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the em... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-13 |
| CVE-2026-108670 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the pr... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108671 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allo... |
medium | 6.5 | — | — | 2026-10-10 | 2026-10-13 |
| CVE-2026-108658 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Sy... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108659 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Sy... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-13 |
| CVE-2026-108660 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allo... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108661 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allo... |
medium | 6.5 | — | — | 2026-10-10 | 2026-10-13 |
| CVE-2026-108662 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allo... |
medium | 5.4 | — | — | 2026-10-10 | 2026-10-18 |
| CVE-2026-108663 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Sy... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108664 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Ai... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-13 |
| CVE-2026-108651 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the ge... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-15 |
| CVE-2026-108652 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Sy... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-18 |
| CVE-2026-108653 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the qu... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108654 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Os... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-13 |
| CVE-2026-108655 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Qu... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.