October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,209
Critical
3,102
High
7,090
Medium
6,615
Low
674
Severity not reported
4,728
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1176), google (780), ibm (323), mozilla (182), oracle (154), adobe (137), linux (126), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-84108 IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbit... |
high | 8.1 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-16673 IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-14 | 2026-10-06 |
| CVE-2026-84239 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
high | 7.6 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84241 IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass securi... |
high | 8.1 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-81656 IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability... |
high | 8.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-81626 IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability... |
high | 8.6 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-81623 IBM Guardium Data Protection 12.2 could allow an authenticated user to execute a... |
high | 8.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-80442 IBM Guardium Data Protection 12.2 is vulnerable to an authenticated OS command i... |
high | 8.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-81669 IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerabi... |
high | 7.2 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-81933 IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability... |
high | 8.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84414 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to chang... |
high | 7.8 | — | Ibm / i | 2026-09-29 | 2026-10-02 |
| CVE-2026-84421 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-29 | 2026-10-02 |
| CVE-2026-84422 IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI... |
high | 7.2 | — | Ibm / guardium data protection | 2026-09-29 | 2026-10-02 |
| CVE-2026-84842 IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary... |
high | 8.1 | — | Ibm / guardium data protection | 2026-09-29 | 2026-10-01 |
| CVE-2026-84440 IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP... |
high | 8.8 | — | Ibm / guardium data protection | 2026-09-29 | 2026-10-01 |
| CVE-2024-28765 IBM SDI 7.2.0.0 through 7.2.0.14 and IBM Security Directory Integrator 10.0.0.0... |
medium | 5.3 | — | Ibm / security directory integrator | 2026-05-27 | 2026-10-27 |
| CVE-2026-12155 IBM MQ could allow an authenticated attacker to cause a denial of service by sen... |
medium | 6.5 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-11831 IBM MQ could allow an authenticated attacker to cause a limited denial of servic... |
medium | 5.4 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-11829 IBM MQ could allow an authenticated attacker to cause a denial of service due to... |
medium | 6.5 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-12343 IBM MQ could allow an authenticated attacker to cause a denial of service due to... |
medium | 6.5 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-12350 IBM MQ could allow an authenticated attacker to cause a denial of service by sen... |
medium | 6.5 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-12669 IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds re... |
medium | 4.3 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-12670 IBM MQ could allow an authenticated attacker to cause a denial of service throug... |
medium | 6.5 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-12727 IBM MQ could allow an authenticated attacker to cause potential process instabil... |
medium | 4.3 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-14511 IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a deni... |
medium | 6.5 | — | Ibm / mq | 2026-10-19 | 2026-10-23 |
| CVE-2026-107674 IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Cer... |
medium | 4.4 | — | Ibm / i | 2026-10-16 | 2026-10-23 |
| CVE-2026-17073 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive in... |
medium | 5.5 | — | Ibm / i | 2026-10-16 | 2026-10-23 |
| CVE-2026-17275 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthoriz... |
medium | 5.3 | — | Ibm / i | 2026-10-16 | 2026-10-23 |
| CVE-2026-17488 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypa... |
medium | 6.5 | — | Ibm / i | 2026-10-16 | 2026-10-23 |
| CVE-2026-17491 IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to b... |
medium | 5.4 | — | Ibm / i | 2026-10-16 | 2026-10-23 |
| CVE-2026-11828 IBM MQ could allow a remote attacker with queue manager control or man-in-the-mi... |
medium | 5.9 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-84882 IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the Univers... |
medium | 6.5 | — | Ibm / guardium data protection | 2026-09-25 | 2026-10-20 |
| CVE-2026-84893 IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI ser... |
medium | 6.5 | — | Ibm / guardium data protection | 2026-09-25 | 2026-10-20 |
| CVE-2026-75063 IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker... |
medium | 5.4 | — | Ibm / planning analytics | 2026-10-12 | 2026-10-15 |
| CVE-2026-18541 IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting... |
medium | 5.4 | — | Ibm / planning analytics | 2026-10-12 | 2026-10-15 |
| CVE-2026-87980 IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker t... |
medium | 5.5 | — | Ibm / guardium data protection | 2026-10-08 | 2026-10-15 |
| CVE-2026-84230 IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a den... |
medium | 5.9 | — | Ibm / guardium data protection | 2026-10-08 | 2026-10-15 |
| CVE-2026-14521 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
medium | 4.9 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16177 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
medium | 5.3 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16182 IBM DataPower Gateway 10.5.0.0 through 10.5.0.0 through 10.5.0.22, 10.6.1 throug... |
medium | 5.9 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.