October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,371
Critical
1,328
High
5,804
Medium
6,212
Low
648
Severity not reported
3,379
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-113352 uTox through 0.18.1 contains a path traversal vulnerability that allows Tox frie... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-108089 ** UNSUPPORTED WHEN ASSIGNED ** Exposure of sensitive system information to an u... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-108086 ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity referen... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-108087 ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of special elements used... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-108088 ** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vu... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-113381 A weakness has been identified in Osclass up to 8.3.1. |
high | 7.3 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-92287 Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and Py... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-113469 A failure has been identified in the SNS during dynamic data files signature che... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-113406 BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. |
high | 8.8 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-113407 BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. |
high | 8.8 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-111090 A logic error exists in the signature verification routine resulting in acceptan... |
high | 7.8 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-112177 A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. |
high | 7.3 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-113405 BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. |
high | 8.8 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-113404 WebITR developed by Uniong has a Insecure Deserialization vulnerability. |
high | 8.8 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-97627 Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) pro... |
high | 7.2 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-93300 The EventON - Subscriber plugin for WordPress is vulnerable to generic SQL Injec... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-113386 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP comm... |
high | 7.1 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-86467 Apache Airflow Amazon provider: the AWS auth manager's SAML login flow does not... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-105299 Summary
Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed... |
high | 8.7 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-86977 An authorization issue was addressed with improved network restrictions. |
high | 7.5 | — | — | 2026-10-20 | 2026-10-29 |
| CVE-2026-86948 This issue was addressed by enforcing library validation on the affected binarie... |
high | 8.8 | — | Apple / xcode | 2026-10-20 | 2026-10-30 |
| CVE-2026-86949 This issue was addressed by enforcing library validation on the affected binarie... |
high | 8.8 | — | Apple / xcode | 2026-10-20 | 2026-10-29 |
| CVE-2026-86961 A race condition was addressed with additional validation. |
high | 7.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-86919 A stack overflow was addressed with improved input validation. |
high | 8.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-86922 A type confusion issue was addressed with improved state management. |
high | 8.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-77937 Letta through 0.16.8 contains an authentication bypass vulnerability that allows... |
high | 8.1 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-77926 Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenti... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-77934 Coze Studio before 0.5.0 contains an insecure default configuration that allows... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-77935 Coze Studio through 0.5.1 contains an insecure direct object reference vulnerabi... |
high | 8.3 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-28853 The issue was addressed with improved checks. |
high | 7.8 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-28854 The issue was addressed with additional app bundle integrity checks. |
high | 7.5 | — | Apple / macos | 2026-10-20 | 2026-10-29 |
| CVE-2026-109440 LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-22 |
| CVE-2026-109443 JoySafeter through 1.0.0 contains a remote code execution vulnerability that all... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-105297 Summary
Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's defau... |
high | 7.5 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-109126 IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appl... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-107366 IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perf... |
high | 8.3 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-107400 IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authen... |
high | 8.8 | — | — | 2026-10-20 | 2026-10-20 |
| CVE-2026-105453 IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through... |
high | 8.4 | — | — | 2026-10-20 | 2026-10-21 |
| CVE-2026-53995 MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileSto... |
high | 8.2 | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-112901 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.