CVEs published October 19 to October 25, 2026
4,106 CVEs were published Oct 19 to Oct 25, 2026, 381 of them critical. CISA added 8 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 4,106
- Critical
- 381
- Added to CISA KEV
- 8
- Busiest day
- Tue, Oct 20 (1,924)
- Quietest day
- Sat, Oct 24 (76)
- October 19, 2026441 CVEs · 31 critical
- October 20, 20261,924 CVEs · 173 critical
- October 21, 2026549 CVEs · 56 critical
- October 22, 2026484 CVEs · 66 critical
- October 23, 2026499 CVEs · 39 critical
- October 24, 202676 CVEs · 12 critical
- October 25, 2026133 CVEs · 4 critical
Added to CISA KEV 8
- CVE-2026-106931SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with…EG Secure Solutions SiteGuard Server Edition for Apache… +1
- CVE-2026-110936A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8).Siemens Software Center
- CVE-2026-96652Plex Media Server SSRFPlex Media Server
- CVE-2026-96654Plex Media Server URL injectionPlex Media Server
- CVE-2026-96655Plex Media Server arbitrary-host SSRFPlex Media Server
- CVE-2026-96656Plex Media Server arbitrary file writePlex Media Server
- CVE-2026-110447Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in…Collabora Online - Built-in CODE Server
- CVE-2026-114625Security Advisory 0199Arista Networks VeloCloud Orchestrator