October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,669
Critical
3,172
High
7,258
Medium
7,098
Low
643
Severity not reported
4,498
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (322), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (115), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-109194 A flaw was found in Red Hat Quay. |
medium | 6.4 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-83536 A flaw was found in openstack-network-exporter. |
medium | 5.3 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-85471 A flaw was found in Quay. |
medium | 6.4 | — | — | 2026-10-12 | 2026-10-15 |
| CVE-2026-109833 A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. |
medium | 5.9 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-105460 A flaw was found in BlueZ. |
medium | 5.5 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-88838 A flaw was found in BusyBox's mount utility. |
medium | 5.5 | — | — | 2026-10-13 | 2026-10-15 |
| CVE-2026-100231 A flaw was found in the GStreamer multimedia framework's ASF muxer plugin (asfmu... |
medium | 6.1 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-100229 A flaw was found in GStreamer's H.266 codec parser library (libgstcodecparsers). |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102071 A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juni... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102072 An Improper Handling of Highly Compressed Data vulnerability in the gRPC library... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102078 A Use After Free vulnerability in the packet forwarding engine (pfe) of Juniper... |
medium | 5.9 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102080 An Improper Resource Locking vulnerability in the clock synchronization daemon (... |
medium | 5.3 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102082 An Improper Handling of Missing Special Element vulnerability in the SSL plugin... |
medium | 5.9 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102083 An Improper Resource Locking vulnerability in the UTM processing of Juniper Netw... |
medium | 5.9 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102085 An Improper Restriction of Communication Channel to Intended Endpoints vulnerabi... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102086 A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks J... |
medium | 5.9 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102087 An Incomplete List of Disallowed Inputs vulnerability in the routing protocol da... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-103993 An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Jun... |
medium | 6.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101934 An Out-of-bounds Write vulnerability in eventd of Juniper Networks Junos OS and... |
medium | 4.4 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101936 A Reachable Assertion vulnerability in the srxpfe process of Juniper Networks Ju... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101937 A Signed to Unsigned Conversion Error vulnerability in the srxpfe of Juniper Net... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101938 An Integer Underflow (Wrap or Wraparound) vulnerability in the srxpfe of Juniper... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101960 An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Jun... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101969 An Improper Input Validation vulnerability in the rpd process of Juniper Network... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101970 A Use After Free vulnerability in the rpd PIM Join/Prune processing of Juniper N... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101971 An Allocation of Resources Without Limits or Throttling vulnerability in rpd, th... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101984 A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juni... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101985 A Improper Validation of Specified Quantity in Input vulnerability in the routin... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101988 A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101989 A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juni... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101992 An Improper Input Validation vulnerability in the routing protocol daemon (rpd)... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101993 A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juni... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101995 An Improper Validation of Specified Quantity in Input vulnerability in the
l2a... |
medium | 4.3 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101996 A Reachable Assertion vulnerability in the
l2ald
daemon of Juniper Networks... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101999 A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102000 A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102011 A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102013 A NULL Pointer Dereference vulnerability in the na-grpcd process of Juniper Netw... |
medium | 4.4 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102017 An Out-of-bounds Write vulnerability in the rpd process of Juniper Networks Juno... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102018 A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.