October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,140
Critical
1,303
High
5,710
Medium
6,092
Low
636
Severity not reported
3,399
In CISA KEV
19
Most affected vendors (by CPE data where available): microsoft (1303), google (745), oracle (156), ibm (140), adobe (128), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-98980 In the Linux kernel, the following vulnerability has been resolved:
namei: don'... |
high | 8.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98981 In the Linux kernel, the following vulnerability has been resolved:
namespace:... |
high | 8.8 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-98968 In the Linux kernel, the following vulnerability has been resolved:
amt: send t... |
high | 8.1 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-98964 In the Linux kernel, the following vulnerability has been resolved:
nvmet: use... |
high | 7.5 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-98965 In the Linux kernel, the following vulnerability has been resolved:
ice: Restor... |
high | 7.5 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98952 In the Linux kernel, the following vulnerability has been resolved:
pfcp: make... |
high | 7.3 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98941 In the Linux kernel, the following vulnerability has been resolved:
ext4: don't... |
high | 7.0 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98944 In the Linux kernel, the following vulnerability has been resolved:
HID: steam:... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-98945 In the Linux kernel, the following vulnerability has been resolved:
HID: steam:... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98932 In the Linux kernel, the following vulnerability has been resolved:
EDAC/altera... |
high | 7.4 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98927 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
high | 7.0 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-63120 pghoard is a PostgreSQL backup daemon and restore tooling that stores backup dat... |
high | 8.4 | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-57121 PraisonAI is a multi-agent teams system. |
high | 8.1 | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-57142 PraisonAI is a multi-agent teams system. |
high | 7.8 | — | — | 2026-10-23 | 2026-10-29 |
| CVE-2026-57144 PraisonAI is a multi-agent teams system. |
high | 8.8 | — | — | 2026-10-23 | 2026-10-29 |
| CVE-2026-57146 PraisonAI is a multi-agent teams system. |
high | 7.5 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-57113 PraisonAI is a multi-agent teams system. |
high | 8.1 | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-57114 PraisonAI is a multi-agent teams system. |
high | 7.2 | — | — | 2026-10-23 | 2026-10-29 |
| CVE-2026-57117 PraisonAI is a multi-agent teams system. |
high | 8.8 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-115728 @hapi/content from 6.0.1 before 6.0.3 contains a regular expression denial of se... |
high | 7.5 | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-112863 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-112849 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-112850 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP... |
high | 8.1 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-112852 Deserialization of Untrusted Data vulnerability in ThemeREX Group Helion helion... |
high | 8.1 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-98911 In the Linux kernel, the following vulnerability has been resolved:
dpaa2-switc... |
high | 7.5 | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98895 In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: H... |
high | 7.0 | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98899 In the Linux kernel, the following vulnerability has been resolved:
netfilter:... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98889 In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwi... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-26 |
| CVE-2026-98870 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: remo... |
high | 8.8 | — | — | 2026-10-23 | 2026-10-24 |
| CVE-2026-56836 PraisonAI is a multi-agent teams system. |
high | 8.2 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-56837 PraisonAI is a multi-agent teams system. |
high | 8.6 | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-56838 PraisonAI is a multi-agent teams system. |
high | 7.8 | — | — | 2026-10-23 | 2026-10-29 |
| CVE-2026-56840 PraisonAI is a multi-agent teams system. |
high | 8.8 | — | — | 2026-10-23 | 2026-10-29 |
| CVE-2026-56832 PraisonAI is a multi-agent teams system. |
high | 8.8 | — | — | 2026-10-23 | 2026-10-30 |
| CVE-2026-56833 PraisonAI is a multi-agent teams system. |
high | 7.5 | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-56834 PraisonAI is a multi-agent teams system. |
high | 7.5 | — | — | 2026-10-23 | 2026-10-29 |
| CVE-2026-56835 PraisonAI is a multi-agent teams system. |
high | 8.3 | — | — | 2026-10-23 | 2026-10-29 |
| CVE-2026-115726 Aider through 0.86.2 contains a command execution vulnerability that allows atta... |
high | 7.8 | — | — | 2026-10-23 | 2026-10-29 |
| CVE-2026-115727 AgenticSeek before commit 409840c contains a remote code execution vulnerability... |
high | 8.1 | — | — | 2026-10-23 | 2026-10-23 |
| CVE-2026-115723 Snap7 through 1.4.3 contains an out-of-bounds write vulnerability in the passive... |
high | 7.4 | — | — | 2026-10-23 | 2026-10-23 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.