October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
23,080
Critical
3,182
High
7,360
Medium
6,922
Low
714
Severity not reported
4,902
In CISA KEV
190
Most affected vendors (by CPE data where available): microsoft (1394), google (802), ibm (323), mozilla (182), oracle (157), adobe (147), linux (129), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-92564 A pre-authentication attacker could leverage type nesting to cause a StackOverfl... |
high | 7.5 | — | Apache / qpid broker-j | 2026-09-25 | 2026-10-05 |
| CVE-2026-63292 Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apa... |
high | 7.5 | — | Apache / http server | 2026-10-01 | 2026-10-05 |
| CVE-2026-63686 A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache H... |
high | 7.5 | — | Apache / http server | 2026-10-01 | 2026-10-05 |
| CVE-2026-73636 Authentication bypass by capture-replay in mod_auth_digest in Apache Software Fo... |
high | 8.1 | — | Apache / http server | 2026-10-01 | 2026-10-05 |
| CVE-2026-73637 Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Serv... |
high | 7.3 | — | Apache / http server | 2026-10-01 | 2026-10-05 |
| CVE-2026-93546 Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an au... |
high | 8.8 | — | Apache / http server | 2026-10-01 | 2026-10-05 |
| CVE-2026-59685 Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while process... |
high | 7.5 | — | Apache / http server | 2026-10-01 | 2026-10-05 |
| CVE-2026-63045 Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Softwar... |
high | 7.5 | — | Apache / http server | 2026-10-01 | 2026-10-05 |
| CVE-2026-47360 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apac... |
high | 7.5 | — | Apache / http server | 2026-10-01 | 2026-10-02 |
| CVE-2026-56153 Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite. |
high | 7.5 | — | Apache / http server | 2026-10-01 | 2026-10-02 |
| CVE-2026-85532 Apache WSS4J accepted attacker-controlled derived-key lengths and offsets withou... |
high | 7.5 | — | Apache / wss4j | 2026-09-30 | 2026-10-02 |
| CVE-2023-31101 Insecure Default Initialization of Resource Vulnerability in Apache Software Fou... |
medium | 6.5 | — | Apache / inlong | 2023-05-22 | 2026-10-28 |
| CVE-2026-95664 Improper Neutralization of Special Elements used in an Expression Language State... |
medium | 5.4 | — | Apache / camel | 2026-10-26 | 2026-10-28 |
| CVE-2026-79650 Apache CXF’s OIDC relying-party component could redirect users to an attacker-co... |
medium | 6.1 | — | Apache / cxf | 2026-10-09 | 2026-10-20 |
| CVE-2026-90466 Path traversal of 'trusted_jar_paths' in Impala 4.5.2 allows an attacker-control... |
medium | 6.5 | — | Apache / impala | 2026-10-07 | 2026-10-13 |
| CVE-2026-92415 — Use of Externally-Controlled Input to Select Classes or Code vulnerability in... |
medium | 5.3 | — | Apache / jackrabbit | 2026-10-07 | 2026-10-13 |
| CVE-2026-105239 Improper Neutralization of Null Byte or NUL Character vulnerability in the Event... |
medium | 5.3 | — | Apache / log4net | 2026-10-06 | 2026-10-09 |
| CVE-2026-105240 Improper Neutralization of Null Byte or NUL Character vulnerability in the Outpu... |
medium | 5.3 | — | Apache / log4net | 2026-10-06 | 2026-10-09 |
| CVE-2026-105241 Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender... |
medium | 5.3 | — | Apache / log4net | 2026-10-06 | 2026-10-09 |
| CVE-2026-105242 Improper Handling of Exceptional Conditions vulnerability in the aspnet-request... |
medium | 5.3 | — | Apache / log4net | 2026-10-06 | 2026-10-09 |
| CVE-2026-105243 Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. |
medium | 5.3 | — | Apache / log4net | 2026-10-06 | 2026-10-09 |
| CVE-2026-105244 Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppende... |
medium | 5.3 | — | Apache / log4net | 2026-10-06 | 2026-10-09 |
| CVE-2026-104713 Allocation of resources without limits or throttling vulnerability in the Apache... |
medium | 6.5 | — | Apache / struts | 2026-10-05 | 2026-10-08 |
| CVE-2026-91085 Apache Karaf's shell/SSH command security is enforced by per-scope ACL configura... |
medium | 6.3 | — | Apache / karaf | 2026-09-29 | 2026-10-07 |
| CVE-2026-81862 Apache Airflow's Teradata provider embedded cloud storage credentials directly i... |
medium | 6.5 | — | Apache / apache-airflow-providers-teradata | 2026-09-29 | 2026-10-07 |
| CVE-2026-81914 Apache Airflow's Google provider built Google Drive search expressions by interp... |
medium | 4.3 | — | Apache / apache-airflow-providers-google | 2026-09-29 | 2026-10-07 |
| CVE-2026-81930 Apache Airflow's Snowflake provider did not validate the connection's `account`... |
medium | 6.3 | — | Apache / apache-airflow-providers-snowflake | 2026-09-29 | 2026-10-07 |
| CVE-2026-86843 The Apache Airflow Teradata provider's compute-cluster example Dag declared ever... |
medium | 6.3 | — | Apache / apache-airflow-providers-teradata | 2026-09-29 | 2026-10-07 |
| CVE-2026-66083 The /datasources/unauth-datasource endpoint does not properly enforce data sourc... |
medium | 6.5 | — | Apache / dolphinscheduler | 2026-09-29 | 2026-10-06 |
| CVE-2026-42528 A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an... |
medium | 4.3 | — | Apache / http server | 2026-10-01 | 2026-10-06 |
| CVE-2026-94251 A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediat... |
medium | 6.5 | — | Apache / sling security | 2026-09-23 | 2026-10-06 |
| CVE-2026-92573 Improper handling of compressed data in the shared GZIP decompressor used for AM... |
medium | 6.5 | — | Apache / qpid broker-j | 2026-09-25 | 2026-10-05 |
| CVE-2026-79768 Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Serv... |
medium | 5.3 | — | Apache / http server | 2026-10-01 | 2026-10-05 |
| CVE-2026-58415 Internal state files accessible to external parties in mod_dav_fs in Apache Soft... |
medium | 5.3 | — | Apache / http server | 2026-10-01 | 2026-10-05 |
| CVE-2026-92899 Apache WSS4J remembers the Nonce of each UsernameToken it accepts, so a captured... |
medium | 4.8 | — | Apache / wss4j | 2026-09-30 | 2026-10-02 |
| CVE-2026-42356 Deployment of wrong handler vulnerability in Apache HTTP Server allows the targe... |
low | 3.7 | — | Apache / http server | 2026-10-01 | 2026-10-06 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.