October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,204
Critical
3,101
High
7,090
Medium
6,615
Low
672
Severity not reported
4,726
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1176), google (780), ibm (323), mozilla (182), oracle (154), adobe (137), linux (126), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-82344 IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer ove... |
critical | 9.8 | — | Ibm / guardium data protection | 2026-10-08 | 2026-10-10 |
| CVE-2026-78406 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access... |
critical | 9.8 | — | Ibm / security verify access | 2026-10-08 | 2026-10-10 |
| CVE-2026-17635 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
critical | 9.1 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-08 |
| CVE-2025-3356 IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remo... |
critical | 9.8 | — | Ibm / tivoli monitoring | 2025-10-30 | 2026-10-07 |
| CVE-2026-18872 IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to st... |
critical | 9.3 | — | Ibm / financial transaction manager | 2026-09-23 | 2026-10-07 |
| CVE-2026-18162 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
critical | 9.8 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-06 |
| CVE-2026-18163 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
critical | 9.8 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-06 |
| CVE-2026-18169 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
critical | 9.9 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-06 |
| CVE-2026-16346 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
critical | 9.9 | — | Ibm / datastage on cloud pak for data | 2026-09-22 | 2026-10-06 |
| CVE-2026-84075 IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass securi... |
critical | 9.9 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84073 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
critical | 9.1 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84064 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
critical | 9.9 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-82832 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
critical | 9.6 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-82340 IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure dese... |
critical | 9.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84031 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
critical | 9.0 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-82967 IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that... |
critical | 9.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84078 IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vuln... |
critical | 9.9 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84082 IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbit... |
critical | 9.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-80441 IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-ord... |
critical | 9.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-81657 IBM Guardium Data Protection 12.2 could allow a remote unauthenticated attacker... |
critical | 9.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84436 IBM Guardium Data Protection 12.2 is vulnerable to command injection in the cert... |
critical | 9.1 | — | Ibm / guardium data protection | 2026-09-29 | 2026-10-02 |
| CVE-2026-16817 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to c... |
high | 7.5 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-16818 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to c... |
high | 7.5 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-14970 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing dur... |
high | 7.5 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-15061 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 's nimesis registration service co... |
high | 8.2 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-15078 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker... |
high | 8.1 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-16686 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to a... |
high | 8.2 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-16690 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to c... |
high | 7.5 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-16703 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to ga... |
high | 7.8 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-16706 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to c... |
high | 7.5 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-16814 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e... |
high | 8.8 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-12148 IBM MQ Operator could allow an authenticated attacker to cause a denial of servi... |
high | 8.8 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-102917 IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevatin... |
high | 7.8 | — | Ibm / i | 2026-10-16 | 2026-10-23 |
| CVE-2026-10572 IBM MQ could allow an authenticated attacker to cause a denial of service or pot... |
high | 8.8 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-10574 IBM MQ could allow an authenticated attacker to cause a denial of service or pot... |
high | 8.8 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-10743 IBM MQ could allow an authenticated attacker to cause a denial of service or cor... |
high | 8.8 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-93905 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allo... |
high | 8.2 | — | Ibm / websphere application server | 2026-10-13 | 2026-10-22 |
| CVE-2026-95696 IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could all... |
high | 7.5 | — | Ibm / websphere application server | 2026-10-13 | 2026-10-22 |
| CVE-2026-84884 IBM Guardium Data Protection 12.2 stores internal REST service-account passwords... |
high | 8.8 | — | Ibm / guardium data protection | 2026-09-25 | 2026-10-20 |
| CVE-2026-84862 IBM Guardium Data Protection 12.2 is vulnerable to insecure deserialization in t... |
high | 7.2 | — | Ibm / guardium data protection | 2026-09-25 | 2026-10-20 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.