October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
23,080
Critical
3,182
High
7,360
Medium
6,922
Low
714
Severity not reported
4,902
In CISA KEV
190
Most affected vendors (by CPE data where available): microsoft (1394), google (802), ibm (323), mozilla (182), oracle (157), adobe (147), linux (129), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2015-6420 Serialized-object interfaces in certain Cisco Collaboration and Social Media; En... |
critical | 9.8 | — | Apache / commons collections | 2015-12-15 | 2026-10-07 |
| CVE-2020-9493 A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 whic... |
critical | 9.8 | — | Apache / chainsaw | 2021-06-16 | 2026-10-07 |
| CVE-2026-87830 In the StAX streaming WS-SecurityPolicy validator, certain relative or unsupport... |
critical | 9.1 | — | Apache / wss4j | 2026-09-30 | 2026-10-06 |
| CVE-2026-89238 WSS4J EncryptedHeader child confusion could promote an attacker-controlled plain... |
critical | 9.1 | — | Apache / wss4j | 2026-09-30 | 2026-10-06 |
| CVE-2026-86246 Initialization of a resource with an insecure default vulnerability in Apache To... |
critical | 9.1 | — | Apache / tomcat native | 2026-09-23 | 2026-10-06 |
| CVE-2026-92609 Session fixation in HTTP management authentication allows remote attackers to ga... |
critical | 9.8 | — | Apache / qpid broker-j | 2026-09-25 | 2026-10-05 |
| CVE-2026-56154 Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using look... |
critical | 9.8 | — | Apache / http server | 2026-10-01 | 2026-10-05 |
| CVE-2026-57941 Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared sessio... |
critical | 9.8 | — | Apache / http server | 2026-10-01 | 2026-10-05 |
| CVE-2026-59797 Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via... |
critical | 9.8 | — | Apache / http server | 2026-10-01 | 2026-10-05 |
| CVE-2026-88920 An authentication bypass in the DOM security processor in Apache WSS4J allows un... |
critical | 9.8 | — | Apache / wss4j | 2026-09-30 | 2026-10-02 |
| CVE-2026-58185 The Apache Traffic Server intercept plugin has a use-after-free. |
critical | 9.8 | — | Apache / traffic server | 2026-07-29 | 2026-10-01 |
| CVE-2026-58179 The Apache Traffic Server regex_remap plugin overflows the stack and integers fr... |
critical | 9.8 | — | Apache / traffic server | 2026-07-29 | 2026-10-01 |
| CVE-2026-58163 Apache Traffic Server mishandles on-disk cache fields and object lifetimes, corr... |
critical | 9.1 | — | Apache / traffic server | 2026-07-29 | 2026-10-01 |
| CVE-2026-56449 Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with cr... |
high | 7.5 | — | Apache / http server | 2026-10-01 | 2026-10-21 |
| CVE-2026-73179 Improper enforcement of single-use authorization code semantics in the JPA OAuth... |
high | 8.1 | — | Apache / cxf | 2026-10-09 | 2026-10-20 |
| CVE-2026-78384 CompressionUtils.inflate() decompressed attacker-controlled DEFLATE data with no... |
high | 7.5 | — | Apache / cxf | 2026-10-09 | 2026-10-20 |
| CVE-2026-86463 Apache CXF's FIQL query parser has a vulnerability in how it searches for operat... |
high | 7.5 | — | Apache / cxf | 2026-10-09 | 2026-10-20 |
| CVE-2026-97791 In Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a... |
high | 7.5 | — | Apache / cxf | 2026-10-09 | 2026-10-20 |
| CVE-2026-107937 In Apache CXF, the parser for multipart/MTOM attachment part headers did not ful... |
high | 7.5 | — | Apache / cxf | 2026-10-09 | 2026-10-16 |
| CVE-2026-100227 Improper Verification of Cryptographic Signature vulnerability in Apache CXF's J... |
high | 7.5 | — | Apache / cxf | 2026-10-09 | 2026-10-16 |
| CVE-2026-108039 By default, StaxUtils placed no limit on the total number of elements or the tot... |
high | 7.5 | — | Apache / cxf | 2026-10-09 | 2026-10-16 |
| CVE-2026-90979 LDAPCache and LDAPBackingEngine build LDAP search filters for user lookup and ro... |
high | 7.3 | — | Apache / karaf | 2026-09-28 | 2026-10-08 |
| CVE-2026-91006 Apache Karaf's instance-management service (InstanceServiceImpl) builds the comm... |
high | 8.8 | — | Apache / karaf | 2026-09-28 | 2026-10-08 |
| CVE-2026-104714 Concurrent execution using shared resource with improper synchronization ('race... |
high | 8.8 | — | Apache / struts | 2026-10-05 | 2026-10-08 |
| CVE-2026-104712 Asymmetric resource consumption (amplification) vulnerability in Apache Struts. |
high | 7.5 | — | Apache / struts | 2026-10-05 | 2026-10-08 |
| CVE-2026-46729 NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_heartmonitor o... |
high | 7.5 | — | Apache / http server | 2026-10-01 | 2026-10-08 |
| CVE-2026-92142 Apache Karaf exposes a JMX MBeanServer guarded by KarafMBeanServerGuard, which e... |
high | 8.8 | — | Apache / karaf | 2026-09-29 | 2026-10-07 |
| CVE-2026-92121 In the WSS4J streaming (StAX) code, a signature reference using the WS-Security... |
high | 7.5 | — | Apache / wss4j | 2026-09-30 | 2026-10-06 |
| CVE-2026-95616 An integer overflow in WSS4J's DER bounds check lets an oversized allocation pas... |
high | 7.5 | — | Apache / wss4j | 2026-09-30 | 2026-10-06 |
| CVE-2026-63718 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')... |
high | 7.5 | — | Apache / http server | 2026-10-01 | 2026-10-06 |
| CVE-2026-102495 Apache XmlSchema doesn't limit how deeply schema imports and includes can be nes... |
high | 7.5 | — | Apache / xmlschema | 2026-09-29 | 2026-10-06 |
| CVE-2026-102496 Apache XmlSchema doesn't limit how deeply schema structures can be nested when i... |
high | 7.5 | — | Apache / xmlschema | 2026-09-29 | 2026-10-06 |
| CVE-2026-102497 The Apache XmlSchema walker (xmlschema-walker) doesn't detect cycles in type der... |
high | 7.5 | — | Apache / xmlschema | 2026-09-29 | 2026-10-06 |
| CVE-2026-48005 Missing authentication checks in mod_auth_digest in Apache Software Foundation A... |
high | 7.5 | — | Apache / http server | 2026-10-01 | 2026-10-06 |
| CVE-2026-94243 A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weak... |
high | 7.3 | — | Apache / sling security | 2026-09-23 | 2026-10-06 |
| CVE-2026-86243 Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake... |
high | 7.5 | — | Apache / tomcat native | 2026-09-23 | 2026-10-06 |
| CVE-2026-86247 Race condition within a thread vulnerability in Apache Tomcat Native allowed cli... |
high | 7.4 | — | Apache / tomcat native | 2026-09-23 | 2026-10-06 |
| CVE-2026-92608 Improper handling of property-encoding exceptions in AMQP 1.0-to-AMQP 0-10 messa... |
high | 7.5 | — | Apache / qpid broker-j | 2026-09-25 | 2026-10-05 |
| CVE-2026-92550 A pre-authentication attacker could leverage type size/count handling to cause e... |
high | 7.5 | — | Apache / qpid broker-j | 2026-09-25 | 2026-10-05 |
| CVE-2026-92560 A pre-authentication attacker could leverage type size/count handling to cause e... |
high | 7.5 | — | Apache / qpid broker-j | 2026-09-25 | 2026-10-05 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.