CVEs published in October 2026
2,630 tracked CVEs from 30 vendors had their first vendor advisory published in October 2026: 332 critical, 1,531 high, 15 in CISA KEV. Newest first.
3,707 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2026-69918High
Windows Core Messaging Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69913High
Windows TCP/IP Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69909High
Microsoft COM for Windows Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69905Medium
Windows AppX Deployment Service Tampering Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69926High
Desktop Window Manager Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69850High
Windows Certificates Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69840High
Windows Certificates Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69914Medium
Windows AppX Deployment Service Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69867High
SQLite Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69795High
Windows Clipboard Server Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69935High
Windows Storage Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69766High
Windows Storage Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69763High
Windows Storage Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-61931High
Windows Perception Simulation Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69639Critical
Windows libarchive Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-70566High
Windows Schannel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69363High
Windows Error Reporting Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-72968High
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-49785High
UEFI Secure Boot Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2026-108460High
Windows Message Queuing Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-69898High
Windows Kernel Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-108466Medium
Windows Kernel Denial of Service Vulnerability
MS Server · 1 advisory - Added
CVE-2026-108465High
Windows Update Delivery Optimization Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-108464High
Software Protection Platform (SPP) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-108462Medium
Windows Kernel Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-108461High
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-108399High
Windows Hyper-V Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105733High
Windows Hyper-V Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-70235Medium
Windows Event Tracing Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105723High
Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105722High
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105719Medium
Microsoft SharePoint Server Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-108467High
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-108458High
Remote Desktop Client Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105720Medium
Microsoft Office SharePoint Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105713Medium
Microsoft Office SharePoint Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2026-102866High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-102865Medium
Microsoft Office SharePoint Information Disclosure Vulnerability
MS Server · 1 advisory - Added
CVE-2026-102864Medium
Microsoft Office SharePoint Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2026-102863High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-102862High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-102861High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-102860High
Microsoft Office SharePoint Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-102859Medium
Microsoft Office SharePoint Spoofing Vulnerability
MS Server · 1 advisory - Added
CVE-2026-102227High
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-108468High
Windows Installer Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-108457High
Microsoft Windows PDF Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-105445Critical
Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token (PAT) they controlled to another Docker Hub user without rotating or revoking the token secret
Docker · 1 advisory - Added
CVE-2026-96956High
SQL Server Elevation of Privilege Vulnerability
MS Server, Red Hat · 2 advisories - Added
CVE-2026-96222High
Active Directory Federation Services (AD FS) Spoofing Vulnerability
MS Server, Red Hat · 2 advisories - Added
CVE-2026-102870High
ASP.NET Core Vulnerability in NetApp Products
NetApp, Red Hat · 2 advisories - Added
CVE-2026-109412Critical
exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information
Ivanti · 1 advisory - Added
CVE-2026-106047High
Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read arbitrary files
Ivanti · 1 advisory - Added
CVE-2026-106043High
Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote unauthenticated attacker to create, modify, trusted site
Ivanti · 1 advisory - Added
CVE-2026-106042Critical
External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint and obtain EPMM connector credentials transmitted by the application
Ivanti · 1 advisory - Added
CVE-2026-106035Medium
Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log
Ivanti · 1 advisory - Added
CVE-2026-106034Medium
Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary directories the host file system
Ivanti · 1 advisory - Added
CVE-2026-104935HighCISA KEV
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
Ivanti · 1 advisory - Added
CVE-2026-107918Medium
Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices
NETGEAR · 1 advisory - Added
CVE-2026-107917Medium
Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router
NETGEAR · 1 advisory - Added
CVE-2026-11732Medium
insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network access (such as WiFi credentials) to run unauthorized commands on the router
NETGEAR · 1 advisory - Added
CVE-2026-11731Medium
authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service to access certain device information or modify administrative settings
NETGEAR · 1 advisory - Added
Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict valid session identifiers and hijack an authenticated administrator session on the web management portal
NETGEAR · 1 advisory - Added
CVE-2026-9218Medium
Insufficient input validation vulnerability in time server (NTP) setting of the listed NETGEAR models allows an attacker who is connected to the router’s local network and has the router’s administrator credentials to run unauthorized commands on the router
NETGEAR · 1 advisory - Added
CVE-2026-49328Unrated
Apache · 1 advisory - Added
CVE-2026-107460Unrated
Apache · 1 advisory - Added
CVE-2026-97334High
Network messaging layer decompression resource exhaustion
Commvault · 1 advisory - Added
CVE-2026-97333High
QAPI stack-based buffer overflow
Commvault · 1 advisory - Added
CVE-2026-77100High
Media Agent Denial of Service
Commvault · 1 advisory - Added
CVE-2026-77099Critical
CVFS Command Execution
Commvault · 1 advisory - Added
CVE-2026-77096High
CVFS Missing Authentication
Commvault · 1 advisory - Added
CVE-2026-77095High
CvFWD Null Pointer Dereference
Commvault · 1 advisory - Added
CVE-2026-77094High
CvFWD Out-of-Bounds Write
Commvault · 1 advisory - Added
CVE-2026-77093High
CvFWD Denial of Service
Commvault · 1 advisory - Added
CVE-2026-77090High
CVFS Information Disclosure
Commvault · 1 advisory - Added
CVE-2026-18228High
HyperScale Path Traversal
Commvault · 1 advisory - Added
CVE-2026-97801High
.NET Framework: Data tampering via improper input validation
MS Server, Red Hat · 2 advisories - Added
CVE-2026-96960High
.NET: Denial of Service via asymmetric resource consumption
MS Server, Red Hat · 2 advisories - Added
CVE-2026-96959High
.NET: Denial of Service via unthrottled resource allocation
MS Server, Red Hat · 2 advisories - Added
CVE-2026-96958High
.NET Denial of Service Vulnerability
MS Server, Red Hat · 2 advisories - Added
CVE-2026-96233High
ASP.NET Core Denial of Service Vulnerability
MS Server, Red Hat · 2 advisories - Added
CVE-2026-96224High
.NET: arbitrary code execution via out-of-bounds write
MS Server, Red Hat · 2 advisories - Added
CVE-2026-85363High
Privilege escalation via integer overflow
MS Server, Red Hat · 2 advisories - Added
CVE-2026-84008High
.NET Denial of Service Vulnerability
MS Server, Red Hat · 2 advisories - Added
CVE-2026-83520High
Arbitrary code execution via untrusted data deserialization
MS Server, Red Hat · 2 advisories - Added
CVE-2026-70174High
.NET Remote Code Execution Vulnerability
MS Server, Red Hat · 2 advisories - Added
CVE-2026-70035High
arbitrary code execution via untrusted data deserialization
MS Server, Red Hat · 2 advisories - Added
CVE-2026-70007High
.NET Framework Remote Code Execution Vulnerability
MS Server, Red Hat · 2 advisories - Added
CVE-2026-69651High
.NET Denial of Service Vulnerability
MS Server, Red Hat · 2 advisories - Added
CVE-2026-58280High
.NET Denial of Service Vulnerability
MS Server, Red Hat · 2 advisories - Added
CVE-2026-23707High
Fortinet · 4 advisories - Added
CVE-2026-23706High
Fortinet · 4 advisories - Added
CVE-2026-23705High
Fortinet · 4 advisories - Added
CVE-2026-108400High
HEVC Video Extensions Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2026-108398High
.NET Framework: Security feature bypass via untrusted search path
MS Server, Red Hat · 2 advisories - Added
CVE-2026-107656Critical
Improper access control and session management in the web management interface
Fortinet · 1 advisory - Added
Broken authorization
Fortinet · 1 advisory - Added
Double free in signal handler
Fortinet · 1 advisory - Added
CVE-2026-106174Medium
GUI Denial of Service
Fortinet · 1 advisory - Added
CVE-2026-106173Critical
Arbitrary file write in grpc phQueryMaster
Fortinet · 1 advisory