October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,116
Critical
1,298
High
5,694
Medium
6,075
Low
636
Severity not reported
3,413
In CISA KEV
19
Most affected vendors (by CPE data where available): microsoft (1303), google (745), oracle (156), ibm (140), adobe (128), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-116236 A vulnerability has been found in Oray Pugongying X5 Pro 7.6.1. |
high | 7.2 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-70388 SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device... |
high | 8.3 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-111841 Cross-Site Request Forgery (CSRF) vulnerability in Aman FunnelKit Automations wp... |
high | 8.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116230 A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24... |
high | 7.8 | — | Ndemiccreations / plague inc | 2026-10-26 | 2026-10-29 |
| CVE-2026-107899 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107900 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107894 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107895 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107896 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107897 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-107898 V-SFT provided by FUJI ELECTRIC CO., LTD. |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-113345 Electronic delivery item Inspection Support System provided by Japan's Ministry... |
high | 7.8 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116117 A flaw has been found in halo-dev halo up to 2.27.0-beta.1. |
high | 7.3 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116116 A vulnerability was detected in Yoosee GM8135S Camera 21.00.01.36. |
high | 8.2 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116110 A vulnerability was found in GiantappMan LiveWallPaper 2.6.8.0 on Windows. |
high | 7.3 | — | — | 2026-10-26 | 2026-10-26 |
| CVE-2026-116112 A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up... |
high | 7.3 | — | — | 2026-10-26 | 2026-10-29 |
| CVE-2026-116106 A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. |
high | 7.3 | — | — | 2026-10-26 | 2026-10-29 |
| CVE-2026-116098 A vulnerability was detected in SteelRaven7 Ravenfield 25407073. |
high | 7.8 | — | Steelraven7 / ravenfield | 2026-10-26 | 2026-10-29 |
| CVE-2026-116099 A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplay... |
high | 8.8 | — | Fcs-ex / scp\ | 2026-10-26 | 2026-10-29 |
| CVE-2026-116094 A vulnerability was determined in EyouCMS up to 1.8.3. |
high | 7.3 | — | — | 2026-10-25 | 2026-10-29 |
| CVE-2026-116061 A vulnerability was identified in SourceCodester Performance Indicator System 1.... |
high | 7.3 | — | — | 2026-10-25 | 2026-10-29 |
| CVE-2026-116062 A security flaw has been discovered in SourceCodester Performance Indicator Syst... |
high | 7.3 | — | — | 2026-10-25 | 2026-10-29 |
| CVE-2026-116060 A vulnerability was determined in SourceCodester Performance Indicator System 1.... |
high | 7.3 | — | — | 2026-10-25 | 2026-10-26 |
| CVE-2026-116208 YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability i... |
high | 8.1 | — | — | 2026-10-25 | 2026-10-25 |
| CVE-2026-116211 YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManage... |
high | 8.2 | — | — | 2026-10-25 | 2026-10-29 |
| CVE-2026-116204 YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the... |
high | 8.1 | — | — | 2026-10-25 | 2026-10-25 |
| CVE-2026-116199 Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController:... |
high | 8.1 | — | Snipeitapp / snipe-it | 2026-10-25 | 2026-10-26 |
| CVE-2026-116201 Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows... |
high | 8.8 | — | Snipeitapp / snipe-it | 2026-10-25 | 2026-10-29 |
| CVE-2026-116189 rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in sta... |
high | 7.5 | — | Rclone / rclone | 2026-10-25 | 2026-10-29 |
| CVE-2026-116191 Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav tha... |
high | 7.5 | — | Rclone / rclone | 2026-10-25 | 2026-10-27 |
| CVE-2026-116183 phpMyFAQ before 4.1.10 contains an object-level authorization bypass vulnerabili... |
high | 7.5 | — | — | 2026-10-25 | 2026-10-26 |
| CVE-2026-116176 vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerabili... |
high | 8.2 | — | Vllm / vllm | 2026-10-25 | 2026-10-28 |
| CVE-2026-116177 vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vul... |
high | 7.5 | — | Vllm / vllm | 2026-10-25 | 2026-10-29 |
| CVE-2026-116178 vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that a... |
high | 7.5 | — | Vllm / vllm | 2026-10-25 | 2026-10-28 |
| CVE-2026-116179 vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that... |
high | 7.5 | — | Vllm / vllm | 2026-10-25 | 2026-10-28 |
| CVE-2026-116180 vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. |
high | 7.7 | — | Vllm / vllm | 2026-10-25 | 2026-10-28 |
| CVE-2026-116172 vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerabili... |
high | 7.5 | — | Vllm / vllm | 2026-10-25 | 2026-10-28 |
| CVE-2026-116173 vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that a... |
high | 7.5 | — | Vllm / vllm | 2026-10-25 | 2026-10-28 |
| CVE-2026-116174 vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerabili... |
high | 7.5 | — | Vllm / vllm | 2026-10-25 | 2026-10-29 |
| CVE-2026-116163 Parse Server before 8.6.102 and 9.0.0 before 9.10.5-alpha.2 contains an authenti... |
high | 7.4 | — | — | 2026-10-25 | 2026-10-26 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.