October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,520
Critical
3,295
High
7,941
Medium
7,624
Low
739
Severity not reported
4,921
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-102065 An Improper Validation of Specified Quantity in Input vulnerability in the routi... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102180 A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd)... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102183 An Improper Validation of Specified Quantity in Input vulnerability in the routi... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102184 An Improper Validation of Specified Quantity in Input vulnerability in the routi... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102185 A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the ro... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101949 A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101961 A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matc... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101962 An Improper Handling of Length Parameter Inconsistency vulnerability in the rout... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101963 An Incorrect Calculation vulnerability in the routing protocol daemon (rpd) of J... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101976 An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Jun... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-73799 A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory c... |
high | 7.5 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-76659 A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow... |
high | 7.5 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-76660 A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds
write that can co... |
high | 8.7 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-76661 A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can cor... |
high | 7.6 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-76663 A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause mem... |
high | 7.5 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-76665 A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory re... |
high | 7.1 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79821 A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption res... |
high | 8.2 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79822 A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruptio... |
high | 7.1 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79824 A directory traversal vulnerability in HPE NonStop Python 3.x could allow attack... |
high | 8.0 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79825 A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution add... |
high | 7.1 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79826 A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may p... |
high | 7.1 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79827 A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-exe... |
high | 7.1 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79828 A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execu... |
high | 7.1 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79829 A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corrupti... |
high | 8.2 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79832 A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potenti... |
high | 7.6 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79833 A vulnerability in HPE NonStop ANSI SQLUTIL may allow a remote unauthenticated a... |
high | 7.5 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79834 A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticat... |
high | 7.4 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-79837 A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to... |
high | 7.3 | — | — | 2026-10-15 | 2026-10-15 |
| CVE-2026-70256 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized at... |
high | 8.8 | — | Microsoft / 365 apps | 2026-10-13 | 2026-10-15 |
| CVE-2026-70257 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized at... |
high | 8.8 | — | Microsoft / 365 apps | 2026-10-13 | 2026-10-15 |
| CVE-2026-94444 Previously, a user operating inside of a malicious Go project that defines a bog... |
high | 7.8 | — | — | 2026-10-08 | 2026-10-15 |
| CVE-2026-94447 Previously, a user operating inside of a malicious Go project that defines a bog... |
high | 7.8 | — | — | 2026-10-08 | 2026-10-15 |
| CVE-2026-97032 HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK en... |
high | 7.5 | — | — | 2026-10-08 | 2026-10-15 |
| CVE-2026-92922 Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability... |
high | 8.1 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-91882 Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Inser... |
high | 8.6 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-92153 F´ (F Prime) is a framework that enables development and deployment of spaceflig... |
high | 7.1 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-92155 F´ (F Prime) is a framework that enables development and deployment of spaceflig... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-86567 A flaw was found in DPDK lib/vhost. |
high | 8.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-86565 A flaw was found in DPDK lib/vhost. |
high | 8.2 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-61843 FileRise is a self-hosted web-based file manager with multi-file upload, editing... |
high | 8.2 | — | — | 2026-10-14 | 2026-10-15 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.