October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,371
Critical
1,328
High
5,804
Medium
6,212
Low
648
Severity not reported
3,379
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-110256 Finsys Dockhand through 1.0.18 contains an LDAP injection vulnerability in the t... |
low | 3.7 | — | — | 2026-10-13 | 2026-10-26 |
| CVE-2026-110232 Fossify File Manager through 1.6.2 contains a path traversal vulnerability that... |
low | 3.3 | — | — | 2026-10-13 | 2026-10-17 |
| CVE-2026-110225 Shaarli through 0.16.9 contains a server-side request forgery vulnerability that... |
low | 2.7 | — | — | 2026-10-13 | 2026-10-26 |
| CVE-2026-110218 Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that all... |
low | 3.7 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-110223 Kavita 0.9.0 through 0.9.1.4 contains a server-side request forgery vulnerabilit... |
low | 3.1 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-110214 Snowy 3.6.5 contains a hard-coded HMAC key vulnerability that allows unauthentic... |
low | 3.7 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-110036 A flaw was found in device-mapper-persistent-data. |
low | 3.3 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-106176 A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow atta... |
low | 3.8 | — | — | 2026-10-13 | 2026-10-14 |
| CVE-2026-106175 A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 th... |
low | 2.3 | — | — | 2026-10-13 | 2026-10-29 |
| CVE-2026-88834 A flaw was found in BusyBox's httpd web server. |
low | 3.7 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-109526 A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. |
low | 3.3 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-95117 Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote a... |
low | 3.7 | — | — | 2026-10-13 | 2026-10-30 |
| CVE-2026-65200 The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP... |
low | 3.5 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-65197 H3C HDM Family-A verifies the RSA signature of a firmware image against a public... |
low | 3.1 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-109410 A vulnerability has been found in macrozheng mall 1.0.3 dcaa93b. |
low | 2.4 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-107832 fastify is a fast and low overhead web framework for Node.js. |
low | 3.7 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-109407 A security vulnerability has been detected in macrozheng mall up to 1.0.3. |
low | 3.1 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-109854 A flaw was found in m17n-lib. |
low | 2.5 | — | — | 2026-10-13 | 2026-10-16 |
| CVE-2026-82632 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9... |
low | 3.1 | — | Gitlab / gitlab | 2026-10-13 | 2026-10-16 |
| CVE-2026-103549 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6... |
low | 2.7 | — | Gitlab / gitlab | 2026-10-13 | 2026-10-14 |
| CVE-2026-100104 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3... |
low | 3.5 | — | Gitlab / gitlab | 2026-10-13 | 2026-10-14 |
| CVE-2026-58242 SAP Cloud Connector contains an improper authorization check, which could be exp... |
low | 3.5 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-108942 A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb84... |
low | 3.5 | — | — | 2026-10-13 | 2026-10-13 |
| CVE-2026-109603 Frappe Framework 15.x before 15.107.3 and 16.x before 16.17.0 relies on a vulner... |
low | 3.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-108935 A weakness has been identified in Edimax BR-6208AC 1.32. |
low | 2.4 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-108936 A security vulnerability has been detected in Edimax BR-6208AC 1.32. |
low | 2.4 | — | — | 2026-10-12 | 2026-10-14 |
| CVE-2026-108933 A vulnerability was identified in Edimax BR-6208AC 1.32. |
low | 2.4 | — | — | 2026-10-12 | 2026-10-16 |
| CVE-2026-108934 A security flaw has been discovered in Edimax BR-6208AC 1.32. |
low | 2.4 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-109564 LearnHouse before 1.4.0 contains a missing authorization vulnerability in POST /... |
low | 3.1 | — | — | 2026-10-12 | 2026-10-27 |
| CVE-2026-108930 A vulnerability has been found in Netcore NR268 1.7.121109. |
low | 2.7 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-104364 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local att... |
low | 3.3 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-42689 Concurrent Execution using Shared Resource with Improper Synchronization ('Race... |
low | 3.7 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-109365 Zebra before 6.4.0 contains an uncontrolled resource consumption vulnerability t... |
low | 3.7 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-109366 Zebra before 6.4.0 contains an improper integrity validation vulnerability in th... |
low | 3.7 | — | — | 2026-10-12 | 2026-10-26 |
| CVE-2026-109332 Network-AI (npm network-ai) before 5.15.2 contains an origin validation error in... |
low | 3.1 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-109302 Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1-alpha.14 applies its Gr... |
low | 3.7 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-109282 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion f... |
low | 2.5 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-109277 ImageMagick before 7.1.2-32 contains a policy bypass vulnerability in the -scrip... |
low | 3.3 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-109278 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in t... |
low | 3.7 | — | — | 2026-10-12 | 2026-10-13 |
| CVE-2026-109279 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronizatio... |
low | 2.5 | — | — | 2026-10-12 | 2026-10-13 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.