October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,444
Critical
1,335
High
5,831
Medium
6,240
Low
648
Severity not reported
3,390
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-20540 In Modem, there is a possible out of bounds read due to a missing bounds check. |
medium | 5.3 | — | Mediatek / mt2716 firmware | 2026-10-05 | 2026-10-09 |
| CVE-2026-20541 In Modem, there is a possible out of bounds read due to a missing permission che... |
medium | 5.3 | — | Mediatek / mt6985 firmware | 2026-10-05 | 2026-10-09 |
| CVE-2026-20542 In apusys, there is a possible memory corruption due to use after free. |
medium | 6.7 | — | Mediatek / mt2718 firmware | 2026-10-05 | 2026-10-09 |
| CVE-2026-20543 In Modem, there is a possible information disclosure due to a logic error. |
medium | 5.5 | — | Mediatek / mt2716 firmware | 2026-10-05 | 2026-10-08 |
| CVE-2026-20544 In meta, there is a possible out of bounds write due to a missing bounds check. |
medium | 6.8 | — | Mediatek / mt8910 firmware | 2026-10-05 | 2026-10-09 |
| CVE-2026-20579 In vdec, there is a possible out of bounds write due to type confusion. |
medium | 6.7 | — | Mediatek / mt2718 firmware | 2026-10-05 | 2026-10-30 |
| CVE-2026-20587 In mtee, there is a possible escalation of privilege due to type confusion. |
medium | 6.7 | — | Mediatek / mt2718 firmware | 2026-10-05 | 2026-10-30 |
| CVE-2026-20532 In apu, there is a possible application crash due to double free. |
medium | 6.2 | — | Mediatek / mt6899 firmware | 2026-10-05 | 2026-10-09 |
| CVE-2026-20533 In display, there is a possible escalation of privilege due to an integer overfl... |
medium | 6.7 | — | Mediatek / mt6739 firmware | 2026-10-05 | 2026-10-09 |
| CVE-2026-20534 In Modem, there is a possible out of bounds read due to an incorrect bounds chec... |
medium | 5.3 | — | Mediatek / mt2716 firmware | 2026-10-05 | 2026-10-09 |
| CVE-2026-20535 In aidl, there is a possible escalation of privilege due to a missing permission... |
medium | 6.7 | — | Mediatek / mt8910 firmware | 2026-10-05 | 2026-10-09 |
| CVE-2026-20536 In aidl, there is a possible memory corruption due to use after free. |
medium | 6.7 | — | Mediatek / mt6878 firmware | 2026-10-05 | 2026-10-09 |
| CVE-2026-20537 In aidl, there is a possible memory corruption due to use after free. |
medium | 6.7 | — | Mediatek / mt6878 firmware | 2026-10-05 | 2026-10-09 |
| CVE-2026-20538 In Modem, there is a possible out of bounds read due to a missing permission che... |
medium | 5.3 | — | Mediatek / mt2716 firmware | 2026-10-05 | 2026-10-09 |
| CVE-2026-20539 In Modem, there is a possible out of bounds read due to a missing bounds check. |
medium | 5.3 | — | Mediatek / mt2716 firmware | 2026-10-05 | 2026-10-09 |
| CVE-2026-20525 In Modem, there is a possible system crash due to improper input validation. |
medium | 5.3 | — | Mediatek / mt2716 firmware | 2026-10-05 | 2026-10-08 |
| CVE-2026-20527 In Modem, there is a possible system crash due to a missing bounds check. |
medium | 5.3 | — | Mediatek / mt2716 firmware | 2026-10-05 | 2026-10-08 |
| CVE-2026-20528 In ccci, there is a possible out of bounds write and read due to a missing bound... |
medium | 6.7 | — | Mediatek / mt2735 firmware | 2026-10-05 | 2026-10-09 |
| CVE-2026-20529 In battery, there is a possible out of bounds write due to a missing bounds chec... |
medium | 6.7 | — | Mediatek / mt6761 firmware | 2026-10-05 | 2026-10-09 |
| CVE-2026-20530 In display, there is a possible out of bounds write due to a missing bounds chec... |
medium | 6.7 | — | Mediatek / mt2718 firmware | 2026-10-05 | 2026-10-09 |
| CVE-2026-105180 A vulnerability was determined in Jeebase 0.0.1. |
medium | 6.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105177 A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. |
medium | 4.7 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105178 A security flaw has been discovered in SourceCodester Drug Recommendation System... |
medium | 4.7 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105176 A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. |
medium | 4.7 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105174 A vulnerability has been found in Gerapy up to 0.9.13. |
medium | 5.4 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105292 Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability... |
medium | 5.9 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105168 A vulnerability was identified in kishor-23 food-waste-management-system 411989e... |
medium | 6.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105171 A security vulnerability has been detected in kishor-23 food-waste-management-sy... |
medium | 6.3 | — | — | 2026-10-05 | 2026-10-06 |
| CVE-2026-105165 A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. |
medium | 6.3 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-105163 A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. |
medium | 5.3 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-105161 A flaw has been found in invariant-systems-ai aiir up to 1.7.0. |
medium | 5.3 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-105224 YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar... |
medium | 5.4 | — | — | 2026-10-04 | 2026-10-05 |
| CVE-2026-104402 Insertion of Sensitive Information Into Sent Data vulnerability in farvisun Mind... |
medium | 4.3 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-105205 SiYuan before 3.8.5 contains an information disclosure vulnerability that allows... |
medium | 5.3 | — | — | 2026-10-04 | 2026-10-05 |
| CVE-2026-105157 A security vulnerability has been detected in RainyGao DocSys up to 2.02.85. |
medium | 4.3 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-105146 A vulnerability was found in Comsenz Discuz! |
medium | 4.7 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-105145 A vulnerability has been found in Weaviate Verba up to 2.1.3. |
medium | 5.3 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-105141 A security flaw has been discovered in topoteretes cognee up to 1.5.4. |
medium | 6.3 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-105144 A flaw has been found in Drogon up to 1.9.13-1/10.0-beta.3 on Windows. |
medium | 5.3 | — | — | 2026-10-04 | 2026-10-06 |
| CVE-2026-105137 A vulnerability was found in Laradock up to 20.4. |
medium | 5.0 | — | — | 2026-10-04 | 2026-10-06 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.