October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,476
Critical
1,339
High
5,869
Medium
6,255
Low
648
Severity not reported
3,365
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-108656 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Sy... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-13 |
| CVE-2026-108644 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Sy... |
medium | 5.4 | — | — | 2026-10-10 | 2026-10-13 |
| CVE-2026-108645 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysCat... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108646 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Sy... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-15 |
| CVE-2026-108647 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allo... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-18 |
| CVE-2026-108648 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GE... |
medium | 6.5 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108649 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the qu... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-13 |
| CVE-2026-108650 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the ge... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108638 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allo... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108639 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allo... |
medium | 5.4 | — | — | 2026-10-10 | 2026-10-13 |
| CVE-2026-108640 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Sy... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108641 JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerabili... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-15 |
| CVE-2026-108642 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysAnn... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-18 |
| CVE-2026-108643 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allo... |
medium | 5.4 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108631 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Sy... |
medium | 5.4 | — | — | 2026-10-10 | 2026-10-13 |
| CVE-2026-108632 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Sy... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-18 |
| CVE-2026-108633 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allo... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108634 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allo... |
medium | 5.4 | — | — | 2026-10-10 | 2026-10-13 |
| CVE-2026-108635 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GE... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108636 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Sy... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-15 |
| CVE-2026-108637 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allo... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-18 |
| CVE-2026-108624 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Sy... |
medium | 5.4 | — | — | 2026-10-10 | 2026-10-13 |
| CVE-2026-108625 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allo... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108626 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Sy... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-15 |
| CVE-2026-108627 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the lo... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-18 |
| CVE-2026-108629 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sa... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-13 |
| CVE-2026-108630 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysDep... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108617 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allo... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-18 |
| CVE-2026-108618 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allo... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108619 JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allo... |
medium | 5.4 | — | — | 2026-10-10 | 2026-10-13 |
| CVE-2026-108620 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Sy... |
medium | 5.4 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108621 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Sy... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-15 |
| CVE-2026-108622 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Sy... |
medium | 5.4 | — | — | 2026-10-10 | 2026-10-18 |
| CVE-2026-108611 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Ai... |
medium | 5.4 | — | — | 2026-10-10 | 2026-10-15 |
| CVE-2026-108612 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Ai... |
medium | 5.4 | — | — | 2026-10-10 | 2026-10-18 |
| CVE-2026-108613 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Ai... |
medium | 5.4 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108614 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Ai... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-13 |
| CVE-2026-108615 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Ai... |
medium | 5.4 | — | — | 2026-10-10 | 2026-10-14 |
| CVE-2026-108616 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Ai... |
medium | 5.4 | — | — | 2026-10-10 | 2026-10-15 |
| CVE-2026-108605 JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the Ai... |
medium | 4.3 | — | — | 2026-10-10 | 2026-10-14 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.