Insikt Group

October 2026 sees 82 high-impact CVEs prioritised, 13% fewer than September

Recorded Future's Insikt Group identified 82 high-impact vulnerabilities for October 2026, 52 with a Very Critical risk score, down 13% from 94 in September. Of these, 36 were surfaced through CISA◼'s KEV catalogue, 33 from open sources and 13 only from honeypot data, across products from 51 vendors, with Citrix◼ and Microsoft together accounting for about 15%. Insikt also published Nuclei detection templates for the two PHP2Shell flaws and for CVE-2026-87902 and CVE-2026-86124.