Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

October 2026 CVE archive

Records published in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in October 2026Materially updated (Critical / KEV)
Total records
17,300
Critical
1,323
High
5,783
Medium
6,188
Low
643
Severity not reported
3,363
In CISA KEV
20

Most affected vendors (by CPE data where available): microsoft (1303), google (745), oracle (156), ibm (140), adobe (129), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-117714
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117715
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117716
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117717
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117718
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117719
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117720
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117721
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117722
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117723
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117724
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117693
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117694
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117695
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117696
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117697
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117698
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117699
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117700
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117701
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117702
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117703
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117704
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117705
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117706
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117707
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-117708
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-112197
Vulnerability due to a lack of authentication in critical functions of the NoviG...
not reported— —— 2026-10-282026-10-28
CVE-2026-112198
XML External Entity (XXE) injection vulnerability in the SAFT import feature of...
not reported— —— 2026-10-282026-10-28
CVE-2026-117692
Rejected reason: Reserved in error; never associated with a vulnerability.
not reported— —— 2026-10-282026-10-28
CVE-2026-101272
The mechanism binding files generated during a shredding process to the authenti...
not reported— —— 2026-10-282026-10-28
CVE-2026-101273
Some of our API endpoints allowed to create order payments referencing a gift ca...
not reported— —— 2026-10-282026-10-28
CVE-2026-101274
When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for...
not reported— —— 2026-10-282026-10-28
CVE-2026-14571
A Blind SQL Injection vulnerability in Futurum Software’s management software, c...
not reported— —— 2026-10-282026-10-28
CVE-2026-104383
Improper Control of Generation of Code in Pigeon MFA service in EagleCloud Aquil...
not reported— —— 2026-10-282026-10-28
CVE-2026-104384
Insufficiently Protected Credentials in tunnel gateway and provisioning interfac...
not reported— —— 2026-10-282026-10-28
CVE-2026-115522
Exposure of Resource to Wrong Sphere (CWE-668) in FileArtifactService in Google...
not reported— —— 2026-10-282026-10-28
CVE-2026-99100
In the Linux kernel, the following vulnerability has been resolved: wifi: p54:...
not reported— —— 2026-10-282026-10-30
CVE-2026-18326
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering...
not reported— —— 2026-10-272026-10-27
CVE-2026-22063
The private keys of eight eMudhra intermediate CA certificates have been comprom...
not reported— —— 2026-10-272026-10-28

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.