# october 2026

> markdown for agents. every page and download is listed in [llms.txt](https://cvegen.art/llms.txt).

october 2026 is still running. the poster is redrawn with every new snapshot until the month ends. last drawn oct 24.

![drybrush poster for october 2026, painted from 13,601 published cves](https://media.cvegen.art/posters/2026-10/1280.jpg?v=9062c33c4e)

what the poster shows: 24 days as bands of dry brush, the first day at the top. every one ran above the 2025 average for their weekday, so every band sweeps fast and wide. two inks: the deep one for open-source packages, enterprise vendors, the linux kernel, browsers and ai software, the pale one for everything else.

the poster being painted, a 12 second film: [mp4](https://media.cvegen.art/films/2026-10.mp4?v=35c148bff0)

| fact | value |
| --- | --- |
| cves so far | 13,601 |
| days in the data | 24 of 31 |
| busiest day | oct 13, 2,291 |
| rated critical, cvss 9 or higher | 1,173 |
| critical with no login and no click | 832 |
| used in real attacks | 14 so far |

## october 2026 in numbers

october 2026 has brought 13,601 cves in its first 24 days, 4.4 times what the same days brought in 2025. every one of its first 24 days ran above the 2025 average for that weekday.

- 2,291 on oct 13, the busiest day so far. microsoft published 1,407 of them at once.
- 1,173 rated critical, cvss 9 or higher. 832 of them can be hit over the network with no login and nothing for a user to click.
- 752 in browsers, 22 times their 2025 pace. no other kind of software grew as fast.
- 2,918 came in three single drops: microsoft 1,407 on oct 13, oracle 1,076 on oct 20, the linux kernel team 435 on oct 18.

## 14 used in real attacks so far

cisa kev, as of oct 24.

### by product

- 2 ahsaycbs, oct 4
- 1 fortinet fortimail, oct 1
- 1 citrix netscaler, oct 4
- 1 atlassian products, oct 5
- 1 ivanti connect secure, oct 13
- 1 microsoft windows, oct 13
- 1 cisco secure email gateway, oct 14
- 1 collabora online – built-in code server, oct 14
- 1 eg secure solutions siteguard server edition, oct 14
- 1 palo alto networks pan-os, oct 14
- 1 beyondtrust remote support, oct 15
- 1 siemens center, oct 15
- 1 arista velocloud orchestrator, oct 22

### every cve

- oct 1, fortinet fortimail, [cve-2026-104286](https://www.cve.org/CVERecord?id=CVE-2026-104286)
- oct 4, ahsay ahsaycbs, [cve-2026-105133](https://www.cve.org/CVERecord?id=CVE-2026-105133)
- oct 4, ahsay ahsaycbs, [cve-2026-105134](https://www.cve.org/CVERecord?id=CVE-2026-105134)
- oct 4, citrix netscaler, [cve-2026-88779](https://www.cve.org/CVERecord?id=CVE-2026-88779)
- oct 5, atlassian multiple products, [cve-2026-21589](https://www.cve.org/CVERecord?id=CVE-2026-21589)
- oct 13, ivanti connect secure, [cve-2026-104935](https://www.cve.org/CVERecord?id=CVE-2026-104935)
- oct 13, microsoft windows, [cve-2026-96951](https://www.cve.org/CVERecord?id=CVE-2026-96951)
- oct 14, palo alto networks pan-os, [cve-2026-0322](https://www.cve.org/CVERecord?id=CVE-2026-0322)
- oct 14, eg secure solutions siteguard server edition, [cve-2026-106931](https://www.cve.org/CVERecord?id=CVE-2026-106931)
- oct 14, collabora collabora online – built-in code server, [cve-2026-110447](https://www.cve.org/CVERecord?id=CVE-2026-110447)
- oct 14, cisco secure email gateway, [cve-2026-76519](https://www.cve.org/CVERecord?id=CVE-2026-76519)
- oct 15, beyondtrust remote support, [cve-2026-102764](https://www.cve.org/CVERecord?id=CVE-2026-102764)
- oct 15, siemens software center, [cve-2026-110936](https://www.cve.org/CVERecord?id=CVE-2026-110936)
- oct 22, arista velocloud orchestrator, [cve-2026-114625](https://www.cve.org/CVERecord?id=CVE-2026-114625)

cisa keeps adding older cves when attacks come to light, so this list can still grow.

## this poster

| fact | value |
| --- | --- |
| period | october 1 to 24, 2026 |
| cves | 13,601 |
| data | cve list v5, cisa kev, drawn 2026-10-24 |
| format | 3:4, drawn for 45 × 60 cm |

[download jpg, 2000 × 2667](https://media.cvegen.art/posters/2026-10/2000.jpg?v=9062c33c4e)

## other months

- before: [september 2026](https://cvegen.art/2026/09.md), 14,934 cves
- [all months](https://cvegen.art/index.md)