CVEs published October 12 to October 18, 2026
5,477 CVEs were published Oct 12 to Oct 18, 2026, 413 of them critical. CISA added 9 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 5,477
- Critical
- 413
- Added to CISA KEV
- 9
- Busiest day
- Tue, Oct 13 (2,291)
- Quietest day
- Sat, Oct 17 (100)
- October 12, 2026683 CVEs · 54 critical
- October 13, 20262,291 CVEs · 167 critical
- October 14, 2026827 CVEs · 79 critical
- October 15, 2026550 CVEs · 48 critical
- October 16, 2026474 CVEs · 52 critical
- October 17, 2026100 CVEs · 3 critical
- October 18, 2026552 CVEs · 10 critical
Added to CISA KEV 9
- CVE-2026-104935Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands.Ivanti Connect Secure
- CVE-2026-96951Windows Shell Security Feature Bypass VulnerabilityMicrosoft Edge · Microsoft Outlook.com +1
- CVE-2026-0322PAN-OS: Authenticated Remote Code Execution (RCE) in the Management InterfacePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2026-105133Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authenticationAhsayCBS
- CVE-2026-105134Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injectionAhsayCBS
- CVE-2026-76519Cisco Secure Email Gateway Arbitrary File Write VulnerabilityCisco Secure Email
- CVE-2026-21589This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, BaAtlassian Bamboo Data Center · Atlassian Bitbucket Data… +6
- CVE-2025-61624An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7Fortinet FortiOS · Fortinet FortiProxy +2
- CVE-2026-102764Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote SupportBeyondTrust Remote Support