Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

October 2026 CVE archive

Records published in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in October 2026Materially updated (Critical / KEV)
Total records
17,332
Critical
1,326
High
5,794
Medium
6,202
Low
648
Severity not reported
3,362
In CISA KEV
20

Most affected vendors (by CPE data where available): microsoft (1303), google (745), oracle (156), ibm (140), adobe (129), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-99108
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix F...
not reported— —— 2026-10-282026-10-28
CVE-2026-99109
In the Linux kernel, the following vulnerability has been resolved: smb: client...
not reported— —— 2026-10-282026-10-28
CVE-2026-99110
In the Linux kernel, the following vulnerability has been resolved: smb: client...
not reported— —— 2026-10-282026-10-30
CVE-2026-99111
In the Linux kernel, the following vulnerability has been resolved: smb: client...
not reported— —— 2026-10-282026-10-28
CVE-2026-99112
In the Linux kernel, the following vulnerability has been resolved: net/sched:...
not reported— —— 2026-10-282026-10-30
CVE-2026-99113
In the Linux kernel, the following vulnerability has been resolved: ksmbd: zero...
not reported— —— 2026-10-282026-10-30
CVE-2026-99114
In the Linux kernel, the following vulnerability has been resolved: ksmbd: init...
not reported— —— 2026-10-282026-10-30
CVE-2026-99101
In the Linux kernel, the following vulnerability has been resolved: ntfs: move...
not reported— —— 2026-10-282026-10-28
CVE-2026-99102
In the Linux kernel, the following vulnerability has been resolved: ntfs: take...
not reported— —— 2026-10-282026-10-28
CVE-2026-99103
In the Linux kernel, the following vulnerability has been resolved: workqueue:...
not reported— —— 2026-10-282026-10-30
CVE-2026-99104
In the Linux kernel, the following vulnerability has been resolved: sched_ext:...
not reported— —— 2026-10-282026-10-28
CVE-2026-99105
In the Linux kernel, the following vulnerability has been resolved: sched_ext:...
not reported— —— 2026-10-282026-10-30
CVE-2026-99106
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu:...
not reported— —— 2026-10-282026-10-30
CVE-2026-117853
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117854
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117855
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117856
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117857
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117858
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117837
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117838
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117839
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117840
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117841
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117842
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117843
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117844
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117845
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117846
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117847
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117848
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117849
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117850
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117851
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117852
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117821
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117822
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117823
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117824
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117825
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.