October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,456
Critical
1,335
High
5,835
Medium
6,248
Low
648
Severity not reported
3,390
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-105707 A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. |
medium | 5.3 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-105705 A security flaw has been discovered in SourceCodester Drug Recommendation System... |
medium | 4.3 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-105621 A security flaw has been discovered in jishenghua jshERP up to 3.5. |
medium | 5.4 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-105703 A vulnerability was determined in PHPGurukul User Registration & Login and User... |
medium | 4.7 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-105573 A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. |
medium | 4.3 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-105610 A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. |
medium | 4.7 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-105572 A vulnerability has been found in PickMall Lilishop up to 4.2.4. |
medium | 4.3 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-105487 A vulnerability was found in yogeshojha reNgine up to 2.2.0. |
medium | 6.3 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-104039 A flaw was found in SSSD. |
medium | 4.7 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-104040 A flaw was found in SSSD. |
medium | 6.1 | — | Fedoraproject / sssd | 2026-10-06 | 2026-10-31 |
| CVE-2026-104041 A flaw was found in SSSD. |
medium | 5.5 | — | — | 2026-10-06 | 2026-10-31 |
| CVE-2026-104042 A flaw was found in sssd. |
medium | 5.5 | — | — | 2026-10-06 | 2026-10-07 |
| CVE-2026-104043 A flaw was found in SSSD. |
medium | 5.5 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-104044 A flaw was found in sssd. |
medium | 6.2 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-104380 Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to... |
medium | 5.3 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-92821 A flaw was found in SSSD. |
medium | 6.8 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-105472 A weakness has been identified in girishsaraf Online-Appointment-Booking-System... |
medium | 6.3 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-104033 A flaw was found in SSSD. |
medium | 5.4 | — | — | 2026-10-06 | 2026-10-07 |
| CVE-2026-104034 A flaw was found in SSSD. |
medium | 4.7 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-104035 A flaw was found in SSSD. |
medium | 5.5 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-104036 A flaw was found in SSSD's NFS idmap plugin. |
medium | 5.8 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-104037 A flaw was found in SSSD. |
medium | 5.5 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-104038 A flaw was found in sssd. |
medium | 5.9 | — | — | 2026-10-06 | 2026-10-07 |
| CVE-2026-104031 A flaw was found in SSSD. |
medium | 5.5 | — | Fedoraproject / sssd | 2026-10-06 | 2026-10-28 |
| CVE-2026-104032 A flaw was found in SSSD. |
medium | 5.5 | — | Fedoraproject / sssd | 2026-10-06 | 2026-10-28 |
| CVE-2026-105785 Joplin is an open source note-taking and to-do application that organises notes... |
medium | 4.8 | — | — | 2026-10-06 | 2026-10-08 |
| CVE-2026-105784 Joplin is an open source note-taking and to-do application that organises notes... |
medium | 4.6 | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-105754 vLLM is an inference and serving engine for large language models. |
medium | 6.5 | — | Vllm / vllm | 2026-10-05 | 2026-10-08 |
| CVE-2026-105755 vLLM is an inference and serving engine for large language models. |
medium | 4.2 | — | Vllm / vllm | 2026-10-05 | 2026-10-08 |
| CVE-2026-105756 vLLM is an inference and serving engine for large language models. |
medium | 6.5 | — | Vllm / vllm | 2026-10-05 | 2026-10-08 |
| CVE-2026-105757 vLLM is an inference and serving engine for large language models. |
medium | 6.5 | — | Vllm / vllm | 2026-10-05 | 2026-10-08 |
| CVE-2026-105758 vLLM is an inference and serving engine for large language models. |
medium | 5.3 | — | Vllm / vllm | 2026-10-05 | 2026-10-08 |
| CVE-2026-105760 vLLM is an inference and serving engine for large language models. |
medium | 5.3 | — | Vllm / vllm | 2026-10-05 | 2026-10-16 |
| CVE-2026-105753 vLLM is an inference and serving engine for large language models. |
medium | 6.5 | — | Vllm / vllm | 2026-10-05 | 2026-10-08 |
| CVE-2026-105743 Docling simplifies document processing by parsing diverse formats and providing... |
medium | 5.8 | — | Docling / docling | 2026-10-05 | 2026-10-08 |
| CVE-2026-105746 Docling simplifies document processing by parsing diverse formats and providing... |
medium | 5.3 | — | Docling / docling | 2026-10-05 | 2026-10-07 |
| CVE-2026-105747 Docling simplifies document processing by parsing diverse formats and providing... |
medium | 4.3 | — | Docling / docling | 2026-10-05 | 2026-10-07 |
| CVE-2026-105748 Docling simplifies document processing by parsing diverse formats and providing... |
medium | 4.3 | — | Docling / docling | 2026-10-05 | 2026-10-07 |
| CVE-2026-105749 Docling simplifies document processing by parsing diverse formats and providing... |
medium | 6.5 | — | Docling / docling | 2026-10-05 | 2026-10-08 |
| CVE-2026-103546 In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager ba... |
medium | 4.3 | — | — | 2026-10-05 | 2026-10-06 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.