October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,016
Critical
1,287
High
5,651
Medium
6,028
Low
636
Severity not reported
3,414
In CISA KEV
19
Most affected vendors (by CPE data where available): microsoft (1303), google (735), oracle (150), ibm (140), adobe (128), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-96402 A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffe... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-97400 In Eclipse OpenJ9 versions up to 0.63, opening a supplied diagnostic dump bundle... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-91186 The PNG chunk reader has no notion of chunk ordering. |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-91189 The GUIX binary resource loader never checks that a font page's glyph range is w... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-92162 Flatpak is a system for building, distributing, and running sandboxed desktop ap... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-92446 `gx_binres_theme_load()` and `gx_binres_font_load()` take the resource as a bare... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-92449 `_gx_binres_pixelmap_table_load()` in the GUIX binary resource (theme) loader in... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-95111 A memory-protected ThreadX module's queue request reaches the Module Manager's d... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-91059 The GUIX JPEG software decoder enforces no ordering on JPEG markers. |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-112942 launch-editor allows users to open files with line numbers in editor from Node.j... |
not reported | — | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-112943 launch-editor allows users to open files with line numbers in editor from Node.j... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-112944 launch-editor allows users to open files with line numbers in editor from Node.j... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-111762 A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. |
not reported | — | — | — | 2026-10-20 | 2026-10-28 |
| CVE-2026-101296 A missing critical step in authentication vulnerability in Apache Tomcat when th... |
not reported | — | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-14933 Cross-site scripting in the embedded co-browsing feature in Unblu inc. |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-9589 Missing authorization in the configuration cascade operations of the Collaborati... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-108062 Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyn... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-107597 PIA's token verification (`verify_token` in `pia/oidc.py`) fetches the OIDC disc... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-85267 A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-2... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-43851 A path traversal vulnerability could allow an authenticated attacker to read arb... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-43852 A vulnerability could allow an authenticated attacker to write files to arbitrar... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-43853 A vulnerability could allow an attacker to send a crafted message to trigger an... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-43854 A vulnerability could allow an attacker with access to an encrypted project file... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-43855 A heap-based buffer overflow vulnerability could allow a remote authenticated at... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-43856 A stack-based buffer overflow vulnerability in the FileProcess::CheckDir functio... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-43857 A vulnerability could allow a remote authenticated attacker to achieve arbitrary... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-43858 A stack-based buffer overflow vulnerability could allow a remote authenticated a... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-113442 Values entered by visitors were placed into the HTML summary email without being... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-113459 In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedde... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-113468 The payment notification endpoint for PayPal accepts incoming data without verif... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-43849 A heap memory read vulnerability could allow an attacker to exfiltrate sensitive... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-43850 A command injection vulnerability could allow an authenticated attacker to achie... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-112068 The backend module does not check whether a backend user has access to the reque... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-112069 The extension no longer applied its access protection to files in file storages... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-112070 The AJAX routes of the extension do not check whether a backend user has access... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-112071 The order cancellation function accepts an order identifier from the request and... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-112237 The extension provides a public proxy endpoint that fetches a URL on behalf of t... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-112238 The file search of the extension builds its database conditions by wrapping the... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-112239 The extension provides a backend endpoint that writes a submitted value into a s... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-112240 The download link for files uploaded through a form relied on a token that could... |
not reported | — | — | — | 2026-10-20 | 2026-10-20 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.