October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
23,080
Critical
3,182
High
7,360
Medium
6,922
Low
714
Severity not reported
4,902
In CISA KEV
190
Most affected vendors (by CPE data where available): microsoft (1394), google (802), ibm (323), mozilla (182), oracle (157), adobe (147), linux (129), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-94586 A command injection vulnerability exists in the WebTools administrative interfac... |
medium | 6.8 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-94581 An OS command injection vulnerability exists in the REST API management interfac... |
medium | 6.8 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87677 An OS command injection vulnerability exists in the account management subsystem... |
medium | 6.6 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87663 An authentication bypass and command injection vulnerability exists in the inter... |
medium | 6.7 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87662 Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of sp... |
medium | 6.7 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87661 Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly ac... |
medium | 5.7 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2023-5649 An Improper Input Validation vulnerability for the registered case credentials i... |
medium | 5.5 | — | Broadcom / brocade active support connectivity gateway | 2026-10-08 | 2026-10-14 |
| CVE-2023-5648 In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers... |
medium | 6.1 | — | Broadcom / brocade active support connectivity gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-5049 A path traversal vulnerability affects the The Zone Alias Import flow feature in... |
medium | 5.7 | — | Broadcom / brocade sannav | 2026-10-08 | 2026-10-14 |
| CVE-2026-5047 A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwor... |
medium | 5.7 | — | Broadcom / brocade sannav | 2026-10-08 | 2026-10-14 |
| CVE-2026-87688 An input validation vulnerability exists in the security certificate management... |
medium | 6.8 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-94580 An arbitrary file and directory deletion vulnerability exists in the REST API ma... |
medium | 4.5 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87667 An argument injection vulnerability exists in the configuration management comma... |
medium | 4.5 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87685 An arbitrary file manipulation vulnerability exists in the WebTools management i... |
medium | 6.8 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87675 An OS command injection vulnerability exists in the configuration management sub... |
medium | 6.8 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-5769 A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS sw... |
medium | 4.1 | — | Broadcom / brocade sannav | 2026-10-08 | 2026-10-14 |
| CVE-2026-87426 An unauthenticated network-based attacker can query specific internal management... |
medium | 4.3 | — | Broadcom / brocade active support connectivity gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-87425 An unauthenticated remote attacker can modify the TLS client trust store in Broc... |
medium | 6.8 | — | Broadcom / brocade active support connectivity gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-87676 A stack-based buffer overflow vulnerability exists in the security library compo... |
medium | 5.7 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87678 An input validation and output encoding vulnerability exists in the web manageme... |
medium | 5.2 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87686 An authentication and access control bypass vulnerability exists in the web serv... |
medium | 4.3 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-94575 A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management... |
medium | 5.7 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87672 An information disclosure vulnerability exists in the SupportLink diagnostic col... |
medium | 5.5 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87668 A stack-based buffer overflow vulnerability exists in the diagnostic execution u... |
medium | 6.5 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-13 |
| CVE-2026-87669 A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST A... |
medium | 4.3 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-13 |
| CVE-2026-87670 An authorization logic vulnerability exists in the Brocade Fabric OS versions be... |
medium | 4.3 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-13 |
| CVE-2026-87681 An Access Control Bypass vulnerability exists in the Role-Based Access Control (... |
medium | 6.3 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-13 |
| CVE-2026-67409 RabbitMQ is a messaging and streaming broker. |
medium | 6.5 | — | Broadcom / rabbitmq server | 2026-09-25 | 2026-10-08 |
| CVE-2026-67408 RabbitMQ is a messaging and streaming broker. |
medium | 6.5 | — | Broadcom / rabbitmq server | 2026-09-25 | 2026-10-08 |
| CVE-2026-66073 RabbitMQ is a messaging and streaming broker. |
medium | 6.5 | — | Broadcom / rabbitmq server | 2026-09-25 | 2026-10-08 |
| CVE-2026-67421 RabbitMQ is a messaging and streaming broker. |
medium | 6.8 | — | Broadcom / rabbitmq server | 2026-09-25 | 2026-10-06 |
| CVE-2026-94584 A race condition and thread-safety vulnerability exists in the web management da... |
low | 2.6 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-94583 A race condition vulnerability exists in the request processing logic of the RES... |
low | 2.6 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.