October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
16,863
Critical
1,275
High
5,585
Medium
5,952
Low
622
Severity not reported
3,429
In CISA KEV
19
Most affected vendors (by CPE data where available): microsoft (1296), google (733), ibm (140), oracle (120), adobe (120), broadcom (61), apache (45), freerdp (42), linuxfoundation (41), dell (40)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-98199 In the Linux kernel, the following vulnerability has been resolved:
hwmon: (pmb... |
not reported | — | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-98200 In the Linux kernel, the following vulnerability has been resolved:
hwmon: (hp-... |
not reported | — | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-98201 In the Linux kernel, the following vulnerability has been resolved:
Input: zero... |
not reported | — | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-98189 In the Linux kernel, the following vulnerability has been resolved:
wifi: wilc1... |
not reported | — | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-98190 In the Linux kernel, the following vulnerability has been resolved:
wifi: wilc1... |
not reported | — | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-98191 In the Linux kernel, the following vulnerability has been resolved:
wifi: wlcor... |
not reported | — | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-98192 In the Linux kernel, the following vulnerability has been resolved:
wifi: wcn36... |
not reported | — | — | — | 2026-10-06 | 2026-10-21 |
| CVE-2026-98193 In the Linux kernel, the following vulnerability has been resolved:
wifi: libip... |
not reported | — | — | — | 2026-10-06 | 2026-10-21 |
| CVE-2026-98194 In the Linux kernel, the following vulnerability has been resolved:
wifi: liber... |
not reported | — | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-98195 In the Linux kernel, the following vulnerability has been resolved:
wifi: iwleg... |
not reported | — | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-98183 In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80... |
not reported | — | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-98184 In the Linux kernel, the following vulnerability has been resolved:
wifi: mwifi... |
not reported | — | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-98185 In the Linux kernel, the following vulnerability has been resolved:
wifi: mwifi... |
not reported | — | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-98186 In the Linux kernel, the following vulnerability has been resolved:
wifi: mwifi... |
not reported | — | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-98187 In the Linux kernel, the following vulnerability has been resolved:
wifi: p54:... |
not reported | — | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-98188 In the Linux kernel, the following vulnerability has been resolved:
wifi: p54:... |
not reported | — | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-98181 In the Linux kernel, the following vulnerability has been resolved:
drm/gud: fi... |
not reported | — | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-98182 In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80... |
not reported | — | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-98179 In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu:... |
not reported | — | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-98176 In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd:... |
not reported | — | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-98177 In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd:... |
not reported | — | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-98178 In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu:... |
not reported | — | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-98167 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
not reported | — | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-98168 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
not reported | — | — | — | 2026-10-06 | 2026-10-21 |
| CVE-2026-98170 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
not reported | — | — | — | 2026-10-06 | 2026-10-21 |
| CVE-2026-98172 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
not reported | — | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-95105 Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integr... |
not reported | — | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-98165 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-06 | 2026-10-19 |
| CVE-2026-4889 SQL injection (SQLi) vulnerability in the eLoanApp application, specifically in... |
not reported | — | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-66588 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-06 | 2026-10-13 |
| CVE-2026-94206 Use of Password Hash With Insufficient Computational Effort vulnerability in dan... |
not reported | — | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-39768 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-06 | 2026-10-07 |
| CVE-2026-39725 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-10-06 | 2026-10-09 |
| CVE-2026-104399 Insertion of Sensitive Information Into Sent Data vulnerability in StylemixTheme... |
not reported | — | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-85153 This vulnerability exists in the Schmooze app due to the use of hardcoded creden... |
not reported | — | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-59357 Insufficient verification of data authenticity (CWE-345) in the external OIDC lo... |
not reported | — | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-59358 Improper authentication (CWE-287) in the OAuth token endpoint in Cloud Foundry U... |
not reported | — | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-105786 Joplin is an open source note-taking and to-do application that organises notes... |
not reported | — | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-105764 Immich is a high-performance self-hosted photo and video management solution. |
not reported | — | — | — | 2026-10-06 | 2026-10-06 |
| CVE-2026-104852 GraphQL Tools provides utilities for building, stitching, and mocking GraphQL sc... |
not reported | — | — | — | 2026-10-05 | 2026-10-06 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.