October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,520
Critical
3,295
High
7,941
Medium
7,624
Low
739
Severity not reported
4,921
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-102986 Plane is an open-source project management tool. |
high | 8.1 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102555 A flaw was found in libsoup. |
high | 8.2 | — | Gnome / libsoup | 2026-09-29 | 2026-10-15 |
| CVE-2026-101258 A flaw was found in Ghostscript. |
high | 7.8 | — | — | 2026-10-06 | 2026-10-15 |
| CVE-2026-102251 The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to gen... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-100351 kin-openapi is a Go project for handling OpenAPI files. |
high | 7.4 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-84875 IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker... |
high | 8.8 | — | Ibm / guardium data protection | 2026-10-08 | 2026-10-15 |
| CVE-2026-84891 IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker... |
high | 7.5 | — | Ibm / guardium data protection | 2026-10-08 | 2026-10-15 |
| CVE-2026-73594 Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16,... |
high | 8.8 | — | Dell / policy manager for secure connect gateway | 2026-09-29 | 2026-10-15 |
| CVE-2026-108094 A use-after-free flaw was found in mutter in the Wayland color-management ICC im... |
high | 7.8 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-83535 A flaw was found in openstack-network-exporter. |
high | 7.4 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-109832 A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. |
high | 7.5 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-88829 A flaw was found in BusyBox httpd's reverse proxy feature. |
high | 7.2 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-85971 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 1... |
high | 7.1 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-85972 Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 1... |
high | 7.4 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-101965 An Use of Externally-Controlled Format String vulnerability in the gRPC daemon o... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101967 An OS Command Injection vulnerability in the bootzd zero-touch provisioning daem... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102062 An Use of Externally-Controlled Format String vulnerability in the ipfd daemon o... |
high | 8.1 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102068 A Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Ju... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102069 A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Netwo... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102070 A Reachable Assertion vulnerability in the Two-Way Active Measurement Protocol (... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102079 An OS command injection vulnerability in the CLI of Juniper Networks Junos OS al... |
high | 7.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102081 A Missing Release of Memory after Effective Lifetime vulnerability in the packet... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102084 An Improper Validation of Syntactic Correctness of Input vulnerability in the VP... |
high | 8.1 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102177 An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Jun... |
high | 7.6 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102179 An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Jun... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-103994 A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon (vgd) of... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-33795 A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-33798 A Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper Networks Ju... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101979 A Stack-based Buffer Overflow vulnerability in the authd Juniper Networks Junos... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102077 An Improper Check for Unusual or Exceptional Conditions vulnerability in the Pac... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101948 A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101951 An Improper Validation of Consistency within Input vulnerability in the routing... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101957 An Improper Initialization vulnerability in the routing protocol daemon (rpd) of... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101966 A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd o... |
high | 8.2 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101973 A NULL Pointer Dereference vulnerability in the pkid component of Juniper Networ... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101977 A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102036 An Integer Overflow or Wraparound vulnerability in the l2ald process of Juniper... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102044 A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102046 A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in netsct... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102057 A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Net... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.