October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
24,515
Critical
3,295
High
7,936
Medium
7,624
Low
739
Severity not reported
4,921
In CISA KEV
191
Most affected vendors (by CPE data where available): microsoft (1424), google (825), linux (722), ibm (323), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (116), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-16163 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.6 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16164 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16165 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-16167 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-14496 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.2 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-14497 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.1 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-82096 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-10-12 | 2026-10-14 |
| CVE-2026-82108 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-10-12 | 2026-10-14 |
| CVE-2026-84418 IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attack... |
high | 7.4 | — | Ibm / datastage on cloud pak for data | 2026-10-12 | 2026-10-14 |
| CVE-2026-81858 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to caus... |
high | 8.1 | — | Ibm / i | 2026-10-13 | 2026-10-14 |
| CVE-2026-73600 Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buf... |
high | 7.8 | — | Dell / powerprotect data manager | 2026-09-03 | 2026-10-14 |
| CVE-2026-85455 MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOS... |
high | 8.2 | — | Themoos / core-moos | 2026-09-03 | 2026-10-14 |
| CVE-2026-85451 MOOS core-moos through 10.4.0 contains a remote process termination vulnerabilit... |
high | 7.1 | — | Themoos / core-moos | 2026-09-03 | 2026-10-14 |
| CVE-2026-85450 MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the... |
high | 7.5 | — | Themoos / core-moos | 2026-09-03 | 2026-10-14 |
| CVE-2026-85449 MOOS-IvP pMarineViewer through 24.8.1 fails to limit the number of tracked node... |
high | 7.5 | — | Mit / moos-ivp | 2026-09-03 | 2026-10-14 |
| CVE-2026-85448 MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed com... |
high | 7.5 | — | Mit / moos-ivp | 2026-09-03 | 2026-10-14 |
| CVE-2026-85447 MOOS-IvP pRealm through version 24.8.1 accepts unbounded REALMCAST_REQ subscript... |
high | 7.5 | — | Mit / moos-ivp | 2026-09-03 | 2026-10-14 |
| CVE-2026-85446 MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in... |
high | 7.5 | — | Mit / moos-ivp | 2026-09-03 | 2026-10-14 |
| CVE-2026-85445 MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxe... |
high | 7.5 | — | Mit / moos-ivp | 2026-09-03 | 2026-10-14 |
| CVE-2026-85444 MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted(),... |
high | 7.5 | — | Mit / moos-ivp | 2026-09-03 | 2026-10-14 |
| CVE-2026-85443 MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOS... |
high | 7.5 | — | Themoos / core-moos | 2026-09-03 | 2026-10-14 |
| CVE-2026-85442 MOOS core-moos through 10.4.0 fails to validate packet length declarations in CM... |
high | 7.5 | — | Themoos / core-moos | 2026-09-03 | 2026-10-14 |
| CVE-2026-85441 MOOS core-moos through 10.4.0 fails to validate that serialized string lengths a... |
high | 7.5 | — | Themoos / core-moos | 2026-09-03 | 2026-10-14 |
| CVE-2026-85439 MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsp... |
high | 7.8 | — | Mit / moos-ivp | 2026-09-03 | 2026-10-14 |
| CVE-2026-85436 MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in C... |
high | 7.5 | — | Themoos / essential-moos | 2026-09-03 | 2026-10-14 |
| CVE-2026-93687 braces through 3.0.3 contains a stack overflow vulnerability in the recursive AS... |
high | 7.5 | — | — | 2026-09-18 | 2026-10-14 |
| CVE-2026-93748 http-cache-semantics through 4.2.0 fails to properly validate security-zeroed ca... |
high | 7.5 | — | — | 2026-09-18 | 2026-10-14 |
| CVE-2026-78501 Improper neutralization of special elements used in a command ('command injectio... |
high | 8.6 | — | Microsoft / 365 copilot chat | 2026-09-17 | 2026-10-14 |
| CVE-2023-4911 GNU C Library Buffer Overflow Vulnerability |
high | 7.8 | Listed | GNU / GNU C Library | 2023-10-03 | 2026-10-14 |
| CVE-2026-72923 The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET... |
high | 7.5 | — | — | 2026-09-08 | 2026-10-14 |
| CVE-2025-8110 Gogs Path Traversal Vulnerability |
high | 8.8 | Listed | Gogs / Gogs | 2025-12-10 | 2026-10-14 |
| CVE-2026-84032 IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a m... |
high | 8.1 | — | Ibm / guardium data protection | 2026-10-08 | 2026-10-14 |
| CVE-2026-97830 Double free in Windows Internet Information Services allows an unauthorized atta... |
high | 7.5 | — | Microsoft / windows 11 23h2 | 2026-10-13 | 2026-10-14 |
| CVE-2026-92883 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1... |
high | 8.7 | — | Gitlab / gitlab | 2026-10-13 | 2026-10-14 |
| CVE-2026-86848 A flaw was found in DPDK lib/vhost vhost-crypto. |
high | 8.8 | — | — | 2026-10-14 | 2026-10-14 |
| CVE-2026-16301 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7... |
high | 8.5 | — | Gitlab / gitlab | 2026-10-13 | 2026-10-14 |
| CVE-2026-110761 ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-14 |
| CVE-2026-52903 A deserialization of untrusted data vulnerability was found in ManageIQ. |
high | 8.8 | — | — | 2026-10-12 | 2026-10-14 |
| CVE-2026-86476 A flaw was found in gst-plugins-base. |
high | 8.4 | — | — | 2026-10-14 | 2026-10-14 |
| CVE-2026-109676 FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability i... |
high | 8.8 | — | — | 2026-10-13 | 2026-10-14 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.