Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

October 2026 CVE archive

Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in October 2026Materially updated (Critical / KEV)
Total records
17,371
Critical
1,328
High
5,804
Medium
6,212
Low
648
Severity not reported
3,379
In CISA KEV
20

Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-112044
A security vulnerability has been detected in dotnet eShop up to 913acea66708a59...
high 7.3 —— 2026-10-192026-10-19
CVE-2026-111441
在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中,内置函数 HllObj...
high 8.1 —— 2026-10-192026-10-19
CVE-2026-108984
A vulnerability is in Web Server default connection ports under the process name...
high 7.5 —— 2026-10-192026-10-20
CVE-2026-112025
A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d...
high 7.3 —— 2026-10-182026-10-19
CVE-2026-107618
`POST /{owner}/{repo}/topics` was registered without the sign-in middleware that...
high 8.1 —— 2026-10-182026-10-29
CVE-2026-109553
Gitea resolved the principals of an SSH certificate by searching the content of...
high 7.5 —— 2026-10-182026-10-19
CVE-2026-98550
In the Linux kernel, the following vulnerability has been resolved: tipc: rejec...
high 7.5 —— 2026-10-182026-10-24
CVE-2026-98555
In the Linux kernel, the following vulnerability has been resolved: llc: fix sk...
high 7.5 —— 2026-10-182026-10-24
CVE-2026-98543
In the Linux kernel, the following vulnerability has been resolved: bpf: fs/xat...
high 7.3 —— 2026-10-182026-10-24
CVE-2026-98532
In the Linux kernel, the following vulnerability has been resolved: ipv6: do no...
high 8.1 —— 2026-10-182026-10-24
CVE-2026-98517
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau...
high 7.8 —— 2026-10-182026-10-24
CVE-2026-98518
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau...
high 7.0 —— 2026-10-182026-10-24
CVE-2026-98520
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd:...
high 7.8 —— 2026-10-182026-10-24
CVE-2026-98524
In the Linux kernel, the following vulnerability has been resolved: rds: ib: Cl...
high 7.8 —— 2026-10-182026-10-24
CVE-2026-98510
In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm:...
high 7.8 —— 2026-10-182026-10-24
CVE-2026-98512
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau...
high 7.1 —— 2026-10-182026-10-24
CVE-2026-98515
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau...
high 7.8 —— 2026-10-182026-10-24
CVE-2026-98501
In the Linux kernel, the following vulnerability has been resolved: HID: alps:...
high 7.1 —— 2026-10-182026-10-24
CVE-2026-98507
In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fi...
high 7.8 —— 2026-10-182026-10-30
CVE-2026-98491
In the Linux kernel, the following vulnerability has been resolved: net: openvs...
high 7.8 —— 2026-10-182026-10-24
CVE-2026-98497
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e:...
high 7.5 —— 2026-10-182026-10-24
CVE-2026-98499
In the Linux kernel, the following vulnerability has been resolved: HID: wacom:...
high 8.1 —— 2026-10-182026-10-24
CVE-2026-98485
In the Linux kernel, the following vulnerability has been resolved: netfilter:...
high 7.1 —— 2026-10-182026-10-24
CVE-2026-98487
In the Linux kernel, the following vulnerability has been resolved: net: bridge...
high 7.8 —— 2026-10-182026-10-24
CVE-2026-98479
In the Linux kernel, the following vulnerability has been resolved: scsi: libis...
high 7.5 —— 2026-10-182026-10-24
CVE-2026-98466
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64:...
high 8.2 —— 2026-10-182026-10-24
CVE-2026-98469
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64:...
high 7.1 —— 2026-10-182026-10-24
CVE-2026-98471
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: D...
high 7.1 —— 2026-10-182026-10-24
CVE-2026-98456
In the Linux kernel, the following vulnerability has been resolved: Bluetooth:...
high 7.0 —— 2026-10-182026-10-30
CVE-2026-98465
In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM...
high 7.0 —— 2026-10-182026-10-24
CVE-2026-98451
In the Linux kernel, the following vulnerability has been resolved: smb: client...
high 8.8 —— 2026-10-182026-10-30
CVE-2026-98454
In the Linux kernel, the following vulnerability has been resolved: smb: client...
high 8.1 —— 2026-10-182026-10-30
CVE-2026-98440
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64:...
high 7.0 —— 2026-10-182026-10-24
CVE-2026-98441
In the Linux kernel, the following vulnerability has been resolved: net/sched:...
high 7.8 —— 2026-10-182026-10-24
CVE-2026-98442
In the Linux kernel, the following vulnerability has been resolved: net/sched:...
high 7.8 —— 2026-10-182026-10-24
CVE-2026-98443
In the Linux kernel, the following vulnerability has been resolved: xfs: fix cu...
high 7.8 —— 2026-10-182026-10-30
CVE-2026-98436
In the Linux kernel, the following vulnerability has been resolved: accel/amdxd...
high 7.8 —— 2026-10-182026-10-26
CVE-2026-111990
A weakness has been identified in kishan0725 Hospital Management System up to 77...
high 7.3 —— 2026-10-182026-10-19
CVE-2026-112021
snac2 before 2.93 contains a heap-based buffer overflow vulnerability in _xs_jso...
high 7.5 —— 2026-10-182026-10-19
CVE-2026-78497
JQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's r...
high 8.4 —— 2026-10-182026-10-20

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.