CVEs published October 26 to November 1, 2026
3,468 CVEs were published Oct 26 to Nov 1, 2026, 349 of them critical. CISA added 10 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 3,468
- Critical
- 349
- Added to CISA KEV
- 10
- Busiest day
- Mon, Oct 26 (768)
- Quietest day
- Sun, Nov 1 (102)
- October 26, 2026768 CVEs · 41 critical
- October 27, 2026627 CVEs · 87 critical
- October 28, 2026636 CVEs · 41 critical
- October 29, 2026544 CVEs · 87 critical
- October 30, 2026678 CVEs · 54 critical
- October 31, 2026113 CVEs · 12 critical
- November 1, 2026102 CVEs · 27 critical
Added to CISA KEV 10
- CVE-2026-109618RCE via OOM corruptionPHP Group PHP
- CVE-2026-109619RCE via stale global statePHP Group PHP
- CVE-2026-111497Out-of-Bounds Write in Google Brotli DecoderGoogle Brotli · node +7
- CVE-2026-48356Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-41709ESX insufficient logging vulnerabilityVMware Cloud Foundation · VMware vSphere Foundation +2
- CVE-2026-46300net: skbuff: preserve shared-frag marker during coalescingLinux
- CVE-2026-76418Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of…Cisco Secure Firewall Adaptive Security Appliance (ASA) Sof…
- CVE-2026-97229Integer Overflow or Wraparound in GitLabGitLab
- CVE-2026-111357Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege…Ivanti Connect Secure
- CVE-2026-118527Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to…Ivanti Connect Secure