October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,456
Critical
1,335
High
5,835
Medium
6,248
Low
648
Severity not reported
3,390
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-106184 Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 4.3 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106185 Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed... |
medium | 6.5 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106187 Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 all... |
medium | 4.2 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106123 The RabbitMQ Java client library allows Java and JVM-based applications to conne... |
medium | 5.5 | — | Vmware / rabbitmq java client | 2026-10-06 | 2026-10-19 |
| CVE-2026-106179 UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 a... |
medium | 5.4 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106033 A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the Ansible Platf... |
medium | 5.4 | — | — | 2026-10-06 | 2026-10-07 |
| CVE-2026-105485 Authentication bypass OAuth device authorization flow in Devolutions Server 2026... |
medium | 6.8 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-103620 A missing authorization vulnerability was identified in GitHub Enterprise Server... |
medium | 6.5 | — | Github / enterprise server | 2026-10-06 | 2026-10-20 |
| CVE-2026-103778 Dell Command | Configure (DCC), versions prior to 5.2.3.35 contain a Use of Hard... |
medium | 5.5 | — | Dell / command\|configure | 2026-10-06 | 2026-10-20 |
| CVE-2026-0198 In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a mi... |
medium | 4.4 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-88252 A flaw was found in sssd. |
medium | 5.5 | — | Fedoraproject / sssd | 2026-10-06 | 2026-10-20 |
| CVE-2026-106114 ImageSharp is a 2D graphics library. |
medium | 5.3 | — | Sixlabors / imagesharp | 2026-10-06 | 2026-10-24 |
| CVE-2026-106116 ImageSharp is a 2D graphics library. |
medium | 5.3 | — | Sixlabors / imagesharp | 2026-10-06 | 2026-10-24 |
| CVE-2026-106111 ImageSharp is a 2D graphics library. |
medium | 5.3 | — | Sixlabors / imagesharp | 2026-10-06 | 2026-10-24 |
| CVE-2026-95153 An issue in Bludit CMS 3.22.0 allows a remote attacker to obtain sensitive infor... |
medium | 4.9 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-105867 Payload is a free and open source headless content management system. |
medium | 6.5 | — | Payloadcms / payload | 2026-10-06 | 2026-10-15 |
| CVE-2026-105957 A vulnerability was detected in SourceCodester Performance Indicator System 1.0. |
medium | 6.3 | — | — | 2026-10-06 | 2026-10-09 |
| CVE-2026-105864 Payload is a free and open source headless content management system. |
medium | 4.3 | — | Payloadcms / payload | 2026-10-06 | 2026-10-15 |
| CVE-2026-105853 Payload is a free and open source headless content management system. |
medium | 6.5 | — | Payloadcms / payload | 2026-10-06 | 2026-10-15 |
| CVE-2026-105847 Payload is a free and open source headless content management system. |
medium | 6.5 | — | Payloadcms / payload | 2026-10-06 | 2026-10-15 |
| CVE-2026-105846 Payload is a free and open source headless content management system. |
medium | 6.1 | — | Payloadcms / payload | 2026-10-06 | 2026-10-15 |
| CVE-2025-71384 Dbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi-Fi networ... |
medium | 6.7 | — | — | 2026-10-06 | 2026-10-14 |
| CVE-2026-70411 Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missi... |
medium | 6.5 | — | Dell / container storage modules | 2026-10-06 | 2026-10-20 |
| CVE-2026-63689 Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertio... |
medium | 6.5 | — | Dell / container storage modules | 2026-10-06 | 2026-10-20 |
| CVE-2026-105921 A vulnerability was identified in Kusalkasilva Learning-Management-System up to... |
medium | 6.3 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-105922 A security flaw has been discovered in vllm-project vLLM up to 0.31.0. |
medium | 4.3 | — | Vllm / vllm | 2026-10-06 | 2026-10-09 |
| CVE-2026-105792 Microsoft UFO is an open-source framework for intelligent automation across devi... |
medium | 6.5 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-87890 An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 be... |
medium | 5.3 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-87975 An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 be... |
medium | 4.3 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-77050 An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 be... |
medium | 5.3 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-82924 Improper Control of Interaction Frequency vulnerability in Pusula Communication,... |
medium | 5.3 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-84429 An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 be... |
medium | 5.3 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-12380 Improper neutralization of input during web page generation ('cross-site scripti... |
medium | 6.1 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-106039 Mooncake Store master through 0.3.13.post1 contains a missing authorization vuln... |
medium | 6.5 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-106041 Mooncake Store master through 0.3.13.post1 contains a missing authorization vuln... |
medium | 6.5 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-105842 lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerability in proch... |
medium | 6.4 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-105789 Microsoft UFO is an open-source framework for intelligent automation across devi... |
medium | 5.4 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-105790 Microsoft UFO is an open-source framework for intelligent automation across devi... |
medium | 6.4 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-105838 libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the... |
medium | 5.5 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-105834 Rundeck before 6.2.0 contains a path traversal vulnerability that allows users h... |
medium | 6.5 | — | — | 2026-10-06 | 2026-10-06 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.