October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,204
Critical
3,101
High
7,090
Medium
6,615
Low
672
Severity not reported
4,726
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1176), google (780), ibm (323), mozilla (182), oracle (154), adobe (137), linux (126), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-85542 IBM Guardium Data Protection 12.2 is affected by a command injection vulnerabili... |
high | 8.8 | — | Ibm / guardium data protection | 2026-09-25 | 2026-10-20 |
| CVE-2026-85029 IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensit... |
high | 8.8 | — | Ibm / guardium data protection | 2026-09-25 | 2026-10-20 |
| CVE-2026-19627 IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitr... |
high | 8.2 | — | Ibm / planning analytics | 2026-10-12 | 2026-10-15 |
| CVE-2026-75061 IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse di... |
high | 7.5 | — | Ibm / planning analytics | 2026-10-12 | 2026-10-15 |
| CVE-2026-17475 IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker... |
high | 7.1 | — | Ibm / planning analytics | 2026-10-12 | 2026-10-15 |
| CVE-2026-19620 IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauth... |
high | 8.8 | — | Ibm / planning analytics | 2026-10-12 | 2026-10-15 |
| CVE-2026-84875 IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker... |
high | 8.8 | — | Ibm / guardium data protection | 2026-10-08 | 2026-10-15 |
| CVE-2026-84891 IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker... |
high | 7.5 | — | Ibm / guardium data protection | 2026-10-08 | 2026-10-15 |
| CVE-2026-17620 IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0... |
high | 7.5 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-15 |
| CVE-2026-14905 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.2 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16169 IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16170 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16176 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16178 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16179 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16181 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.4 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-15781 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.0 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-15784 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.1 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-15819 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-15822 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-15824 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.2 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16111 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16159 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.6 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16161 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16163 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.6 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16164 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16165 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-16167 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-14496 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.2 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-14497 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.1 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-82096 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-10-12 | 2026-10-14 |
| CVE-2026-82108 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-10-12 | 2026-10-14 |
| CVE-2026-84418 IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attack... |
high | 7.4 | — | Ibm / datastage on cloud pak for data | 2026-10-12 | 2026-10-14 |
| CVE-2026-81858 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to caus... |
high | 8.1 | — | Ibm / i | 2026-10-13 | 2026-10-14 |
| CVE-2026-84032 IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a m... |
high | 8.1 | — | Ibm / guardium data protection | 2026-10-08 | 2026-10-14 |
| CVE-2026-14507 IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticat... |
high | 7.7 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-14999 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2025-14753 IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directori... |
high | 7.5 | — | Ibm / cloud pak for data | 2026-09-18 | 2026-10-14 |
| CVE-2025-14754 IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitr... |
high | 8.8 | — | Ibm / cloud pak for data | 2026-09-18 | 2026-10-14 |
| CVE-2026-84276 IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerabi... |
high | 7.5 | — | Ibm / guardium data protection | 2026-10-08 | 2026-10-12 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.