October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,016
Critical
1,287
High
5,651
Medium
6,027
Low
637
Severity not reported
3,414
In CISA KEV
19
Most affected vendors (by CPE data where available): microsoft (1303), google (735), oracle (145), ibm (140), adobe (128), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2023-42997 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2023-42998 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2023-42999 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2024-54582 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-27 |
| CVE-2024-54583 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-27 |
| CVE-2024-54584 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-27 |
| CVE-2024-54585 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-27 |
| CVE-2024-54586 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-27 |
| CVE-2024-54587 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-27 |
| CVE-2023-42990 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112768 Parse Server before 8.6.99 and 9.0.0 before 9.10.3-alpha.2 evaluates checks agai... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112769 Parse Server before 8.6.98 and 9.0.0 before 9.10.3-alpha.1 does not enforce the... |
not reported | — | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2024-54581 Rejected reason: This candidate was in a CNA pool that was not assigned to any i... |
not reported | — | — | — | 2026-10-19 | 2026-10-27 |
| CVE-2026-55644 Element X iOS is a Matrix iOS Client provided by Element. |
not reported | — | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-111755 follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically f... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-105810 Tapo C320WS
V2.0 contains an authenticated stack-based buffer overflow in the lo... |
not reported | — | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-111749 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. |
not reported | — | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-111750 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. |
not reported | — | — | — | 2026-10-19 | 2026-10-28 |
| CVE-2026-111063 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. |
not reported | — | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-111064 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. |
not reported | — | — | — | 2026-10-19 | 2026-10-28 |
| CVE-2026-111065 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-111066 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. |
not reported | — | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-111748 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-103038 PingTools Network Utilities 4.64 contains an OS command injection vulnerability... |
not reported | — | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-77225 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-77227 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-77228 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-12254 Netskope is notified about a potential gap in its agent (NSClient) where a syste... |
not reported | — | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-111046 FOSSBilling is an open source billing and client-management platform. |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-111053 FOSSBilling is an open source billing and client-management platform. |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-111056 FOSSBilling is an open source billing and client-management platform. |
not reported | — | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-8168 Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSv... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-78162 Deserialization of Untrusted Data vulnerability in Apache Camel. |
not reported | — | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-79613 vulnerability in Apache Answer. |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-79620 Exposure of sensitive information through data queries vulnerability in Apache A... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-79624 Insufficient session expiration vulnerability in Apache Answer. |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-79633 vulnerability in Apache Answer. |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-86589 Incorrect implementation of authentication algorithm vulnerability in Apache Ans... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-64944 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-64945 A vulnerability in Apache Answer. |
not reported | — | — | — | 2026-10-19 | 2026-10-19 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.