October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,371
Critical
1,328
High
5,804
Medium
6,212
Low
648
Severity not reported
3,379
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-112892 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112893 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-28 |
| CVE-2026-112894 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112895 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112896 Pillow is a Python imaging library. |
high | 7.1 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112405 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112406 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112891 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112399 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-28 |
| CVE-2026-112400 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112401 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112402 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112404 Pillow is a Python imaging library. |
high | 8.2 | — | Python / pillow | 2026-10-19 | 2026-10-28 |
| CVE-2026-112360 A security vulnerability has been detected in Netis EAP930 1.250905.115454. |
high | 8.0 | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-112392 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-26 |
| CVE-2026-112396 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-26 |
| CVE-2026-112397 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-27 |
| CVE-2026-112257 A flaw was found in GIMP. |
high | 7.8 | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-112258 A flaw was found in GIMP. |
high | 7.8 | — | — | 2026-10-19 | 2026-10-21 |
| CVE-2026-112261 A flaw was found in GIMP. |
high | 7.8 | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-76788 The OSDP Control Panel reply parser cp_decode_response() in subsys/mgmt/osdp/src... |
high | 8.8 | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-112390 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-23 |
| CVE-2026-112391 Pillow is a Python imaging library. |
high | 7.5 | — | Python / pillow | 2026-10-19 | 2026-10-23 |
| CVE-2026-112394 Pillow is a Python imaging library. |
high | 8.2 | — | Python / pillow | 2026-10-19 | 2026-10-26 |
| CVE-2026-112395 Pillow is a Python imaging library. |
high | 8.2 | — | Python / pillow | 2026-10-19 | 2026-10-28 |
| CVE-2026-112301 A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. |
high | 7.3 | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-82166 Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentic... |
high | 8.8 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-71169 Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permis... |
high | 7.0 | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-71170 Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Pa... |
high | 7.8 | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-112777 Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in... |
high | 7.2 | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-112778 Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation f... |
high | 8.8 | — | Traefik / traefik | 2026-10-19 | 2026-10-23 |
| CVE-2026-112780 Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that al... |
high | 8.8 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-112782 Grav 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2 contains a resource exha... |
high | 7.5 | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-112770 Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote code executi... |
high | 8.8 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-112772 Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerabilit... |
high | 8.8 | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-112773 Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerabilit... |
high | 8.8 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112774 Craft CMS from 5.8.0 before 5.11.0 contains a remote code execution vulnerabilit... |
high | 7.2 | — | — | 2026-10-19 | 2026-10-20 |
| CVE-2026-112775 Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerabili... |
high | 7.5 | — | — | 2026-10-19 | 2026-10-22 |
| CVE-2026-112260 A flaw was found in GIMP. |
high | 7.1 | — | — | 2026-10-19 | 2026-10-19 |
| CVE-2026-112252 A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-O... |
high | 7.3 | — | — | 2026-10-19 | 2026-10-20 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.