October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,367
Critical
1,327
High
5,803
Medium
6,210
Low
649
Severity not reported
3,378
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1303), google (745), oracle (156), ibm (140), adobe (129), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-61673 WeGIA is a web manager for charitable institutions. |
not reported | — | — | — | 2026-10-29 | 2026-10-29 |
| CVE-2026-119284 joserfc is a Python library that provides an implementation of several JSON Obje... |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-115943 Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string... |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-119282 Nx is a monorepo solution for TypeScript and polyglot codebases. |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-61576 Lightdash is an open source business intelligence platform. |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-119208 pypdf is a free and open-source pure-python PDF library. |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-119209 pypdf is a free and open-source pure-python PDF library. |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-119203 pypdf is a free and open-source pure-python PDF library. |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-119204 pypdf is a free and open-source pure-python PDF library. |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-119205 pypdf is a free and open-source pure-python PDF library. |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-119206 pypdf is a free and open-source pure-python PDF library. |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-119207 pypdf is a free and open-source pure-python PDF library. |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-67203 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-29 | 2026-10-29 |
| CVE-2026-67205 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-29 | 2026-10-29 |
| CVE-2026-51831 An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected,... |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-51832 An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected,... |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-119193 PHPUnit is a testing framework for PHP. |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-6877 ServiceNow has addressed a domain separation bypass security issue that was iden... |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-58118 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-29 | 2026-10-29 |
| CVE-2026-58119 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-29 | 2026-10-29 |
| CVE-2026-58120 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-29 | 2026-10-29 |
| CVE-2026-118773 Glob matches files using patterns the shell uses. |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-103093 ServiceNow has remediated a sandbox escape security issue that was identified in... |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-103094 ServiceNow has remediated an information disclosure vulnerability that was ident... |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-60111 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-29 | 2026-10-29 |
| CVE-2026-51851 modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Travers... |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-51863 DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packag... |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-51902 SuperAGI up to v0.0.14 contains an improper access control vulnerability. |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-51903 SuperAGI v0.0.14 contains an improper access control vulnerability in get_agent_... |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-51912 OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_... |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-118769 Botan is a C++ cryptography library. |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-118768 Botan is a C++ cryptography library. |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-116566 socket.getaddrinfo() previously accepted null bytes within *host* and *port* par... |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-62374 SD JWT JS is a JavaScript implementation of the Selective Disclosure JWT (SD-JWT... |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-118764 minimatch is a minimal matching utility for converting glob expressions into Jav... |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-118765 Botan is a C++ cryptography library. |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-107053 Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unaut... |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-107056 Insecure permissions in the io.file.importer.ImportActivity component of OpenTra... |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-107057 An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code... |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
| CVE-2026-107059 An issue in Nextcloud versionCode 30390190 allows attackers to force victim user... |
not reported | — | — | — | 2026-10-29 | 2026-10-30 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.