October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,390
Critical
1,328
High
5,808
Medium
6,216
Low
648
Severity not reported
3,390
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-116554 A flaw has been found in Argilla up to 2.8.0. |
low | 3.5 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-116555 A vulnerability has been found in Argilla up to 2.8.0. |
low | 2.4 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116556 A vulnerability was found in Argilla up to 2.8.0. |
low | 2.4 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116733 flatcc through 0.6.4 contains an out-of-bounds read vulnerability in __flatcc_js... |
low | 3.7 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116734 flatcc through 0.6.4 contains an integer overflow vulnerability in the check_hea... |
low | 3.7 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116726 Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_... |
low | 3.3 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116727 gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in vgm_... |
low | 3.3 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116729 libfvde through 20260923 contains a heap out-of-bounds read vulnerability in lib... |
low | 3.3 | — | — | 2026-10-26 | 2026-10-27 |
| CVE-2026-116482 A vulnerability has been found in subhajitkhan online-clinic-management-system u... |
low | 3.5 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-72755 Routinator stores a newly-retrieved TA certificate via HTTPS in cache without va... |
low | 3.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116385 A security vulnerability has been detected in Bdtask Garage 24 Garage Management... |
low | 3.5 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-111404 Concurrent Execution using Shared Resource with Improper Synchronization ('Race... |
low | 3.7 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-82390 The Espressif AES driver drivers/crypto/crypto_esp32_aes.c advertises a multi-se... |
low | 3.7 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-19742 The IPv6 stack derived the long-lived secret key used to compute RFC 7217 stable... |
low | 3.7 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-93846 Mattermost versions 11.7.x <= 11.7.10 fail to restrict which built-in roles can... |
low | 3.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116544 Open5GS 2.6.1 through 2.8.0 contains an out-of-bounds read vulnerability in pars... |
low | 3.7 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-93847 Mattermost versions 11.7.x <= 11.7.10 fail to validate reserved system post type... |
low | 3.5 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-93848 Mattermost versions 11.7.x <= 11.7.10 fail to apply outbound internal-connection... |
low | 2.7 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116281 A vulnerability was identified in Kameleo up to 5.0.1.26. |
low | 3.3 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116215 MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Car... |
low | 3.1 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-116261 A security vulnerability has been detected in libimobiledevice up to 1.4.0. |
low | 3.5 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116229 A vulnerability was determined in ffxiv-teamcraft FFXIV Teamcraft up to 11.4.31. |
low | 3.5 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116227 A vulnerability has been found in Edimax BR-6208AC 1.32. |
low | 2.4 | — | — | 2026-10-26 | 2026-10-31 |
| CVE-2026-116228 A vulnerability was found in 777genius agent-teams-ai up to 2.17.10. |
low | 3.3 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116121 A vulnerability was identified in NocoDB up to 2026.08.0. |
low | 3.7 | — | — | 2026-10-26 | 2026-10-29 |
| CVE-2026-116122 A security flaw has been discovered in NocoDB up to 2026.07.0. |
low | 3.7 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116123 A weakness has been identified in NocoDB up to 2026.07.0. |
low | 3.7 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116114 A weakness has been identified in Yoosee GM8135S Camera 21.00.01.36. |
low | 3.7 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116115 A security vulnerability has been detected in Yoosee GM8135S Camera 21.00.01.36. |
low | 3.1 | — | — | 2026-10-26 | 2026-10-29 |
| CVE-2026-116105 A weakness has been identified in HeyCyan App 1.0.103 on Android. |
low | 3.7 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116100 A vulnerability has been found in gougucms up to 4.08.18. |
low | 2.4 | — | — | 2026-10-26 | 2026-10-29 |
| CVE-2026-116054 A security vulnerability has been detected in SH3. |
low | 2.2 | — | — | 2026-10-25 | 2026-10-29 |
| CVE-2026-116197 Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-deterministic... |
low | 2.6 | — | — | 2026-10-25 | 2026-10-29 |
| CVE-2026-116190 rclone from v1.56.0 before v1.75.2 contains an information disclosure vulnerabil... |
low | 3.7 | — | Rclone / rclone | 2026-10-25 | 2026-10-29 |
| CVE-2026-116156 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caus... |
low | 3.3 | — | — | 2026-10-25 | 2026-10-26 |
| CVE-2026-116157 ImageMagick before 7.1.2-33 contains a memory leak vulnerability in PerlMagick t... |
low | 3.3 | — | — | 2026-10-25 | 2026-10-26 |
| CVE-2026-116158 ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick c... |
low | 2.5 | — | — | 2026-10-25 | 2026-10-26 |
| CVE-2026-116159 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in t... |
low | 3.3 | — | — | 2026-10-25 | 2026-10-26 |
| CVE-2026-116160 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-based buffe... |
low | 3.3 | — | — | 2026-10-25 | 2026-10-26 |
| CVE-2026-116150 ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the FPX enco... |
low | 3.1 | — | — | 2026-10-25 | 2026-10-26 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.