CVEs published October 5 to October 11, 2026
3,214 CVEs were published Oct 5 to Oct 11, 2026, 366 of them critical. CISA added 5 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 3,214
- Critical
- 366
- Added to CISA KEV
- 5
- Busiest day
- Tue, Oct 6 (1,015)
- Quietest day
- Sun, Oct 11 (233)
- October 5, 2026416 CVEs · 33 critical
- October 6, 20261,015 CVEs · 99 critical
- October 7, 2026330 CVEs · 51 critical
- October 8, 2026492 CVEs · 51 critical
- October 9, 2026317 CVEs · 38 critical
- October 10, 2026411 CVEs · 77 critical
- October 11, 2026233 CVEs · 17 critical
Added to CISA KEV 5
- CVE-2015-3306The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.
- CVE-2015-5477named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion…
- CVE-2016-3081Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackerorg.apache.struts:struts2-core
- CVE-2021-3199Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /..
- CVE-2023-22894Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter.@strapi/strapi