October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,068
Critical
1,296
High
5,672
Medium
6,054
Low
636
Severity not reported
3,410
In CISA KEV
19
Most affected vendors (by CPE data where available): microsoft (1303), google (744), oracle (154), ibm (140), adobe (128), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-92375 An improper access control vulnerability in
the IPC communication between TeamVi... |
high | 7.8 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-107672 A maliciously crafted .stack.json file can trigger a trusted Markdown injection... |
high | 8.8 | — | — | 2026-10-27 | 2026-10-29 |
| CVE-2026-111582 A DLL loading vulnerability in the
TeamViewer Remote Management Monitoring insta... |
high | 7.3 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-111583 Improper access control in the installer
staging directory used by TeamViewer Fu... |
high | 7.3 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-111584 A race condition in the installation
process of TeamViewer Remote Management - P... |
high | 7.3 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-111585 An integer overflow in the remote-control
screen processing component of TeamVie... |
high | 8.8 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-104189 The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for N... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-117604 Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger:... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-94346 PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 throu... |
high | 7.2 | — | — | 2026-10-27 | 2026-10-29 |
| CVE-2026-94347 PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 throu... |
high | 7.2 | — | — | 2026-10-27 | 2026-10-29 |
| CVE-2026-118008 Privilege escalation in the DOM: Navigation component. |
high | 8.8 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-117602 Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plu... |
high | 8.4 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-117567 esp-mcp through commit 28afddf contains an OS command injection vulnerability th... |
high | 7.8 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-117568 mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that all... |
high | 7.0 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-117569 Kali-GPT through commit a608c74 contains an OS command injection vulnerability i... |
high | 7.8 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-117573 hagent through commit 761eec6 contains an OS command injection vulnerability tha... |
high | 7.8 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-117601 Electrum before 4.8.3 fails to verify signatures of wallet-owned inputs in uncon... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-117560 ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnera... |
high | 7.8 | — | — | 2026-10-27 | 2026-10-28 |
| CVE-2026-117561 Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability th... |
high | 7.8 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-117558 The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vu... |
high | 7.8 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-117559 DroidMind through 0.4.0 contains a command injection vulnerability that allows M... |
high | 7.8 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-117553 Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerabi... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-92546 Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity In... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-65119 NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRou... |
high | 8.4 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-65120 NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a ser... |
high | 7.1 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-65151 NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a... |
high | 8.4 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-24269 NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a ser... |
high | 7.1 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-47486 NVIDIA PhysX for all platforms contains a vulnerability where an attacker could... |
high | 7.8 | — | — | 2026-10-27 | 2026-10-29 |
| CVE-2026-100164 Observable response discrepancy vulnerability in Rolantis Information Technologi... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-41020 Eaton easyE4 uses a static nonce during authentication, which could allow an una... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-41021 Eaton easyE4 uses an insufficiently strong password policy. |
high | 7.5 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-109995 The Advanced Views – Display Framework for Gutenberg & Elementor plugin for Word... |
high | 7.2 | — | — | 2026-10-27 | 2026-10-29 |
| CVE-2026-117536 REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the... |
high | 8.8 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-116896 REDAXO before 5.21.5 contains a missing authorization vulnerability in the backu... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-116898 REDAXO before 5.21.4 contains a missing authorization vulnerability in the media... |
high | 7.1 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-116890 Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing authorization vuln... |
high | 7.3 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-116880 Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site request forgery... |
high | 7.1 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-116873 Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vuln... |
high | 7.3 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-116876 Semantic MediaWiki from 2.5.0 before 7.3.1 contains an improper authorization vu... |
high | 7.1 | — | — | 2026-10-27 | 2026-10-27 |
| CVE-2026-116878 Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource con... |
high | 7.5 | — | — | 2026-10-27 | 2026-10-27 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.