October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,209
Critical
3,102
High
7,090
Medium
6,615
Low
674
Severity not reported
4,728
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1176), google (780), ibm (323), mozilla (182), oracle (154), adobe (137), linux (126), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-13257 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
medium | 6.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-13258 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
medium | 5.4 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-14273 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
medium | 6.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-82103 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
medium | 6.5 | — | Ibm / datastage on cloud pak for data | 2026-10-12 | 2026-10-14 |
| CVE-2026-17484 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of s... |
medium | 5.5 | — | Ibm / i | 2026-10-13 | 2026-10-14 |
| CVE-2026-17487 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user pro... |
medium | 5.3 | — | Ibm / i | 2026-10-13 | 2026-10-14 |
| CVE-2026-18318 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-forc... |
medium | 5.3 | — | Ibm / i | 2026-10-13 | 2026-10-14 |
| CVE-2026-18343 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP ta... |
medium | 4.4 | — | Ibm / i | 2026-10-13 | 2026-10-14 |
| CVE-2026-93886 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to exec... |
medium | 5.4 | — | Ibm / i | 2026-10-13 | 2026-10-14 |
| CVE-2026-84247 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
medium | 6.5 | — | Ibm / guardium data protection | 2026-10-08 | 2026-10-14 |
| CVE-2026-14509 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
medium | 5.9 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-84290 IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validat... |
medium | 5.1 | — | Ibm / guardium data protection | 2026-10-08 | 2026-10-13 |
| CVE-2026-17189 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access... |
medium | 6.1 | — | Ibm / security verify access | 2026-10-08 | 2026-10-13 |
| CVE-2026-78399 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access... |
medium | 6.5 | — | Ibm / security verify access | 2026-10-08 | 2026-10-12 |
| CVE-2026-12091 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access... |
medium | 5.3 | — | Ibm / security verify access | 2026-10-08 | 2026-10-12 |
| CVE-2026-16830 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access... |
medium | 5.4 | — | Ibm / security verify access | 2026-10-08 | 2026-10-12 |
| CVE-2026-11936 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access... |
medium | 5.4 | — | Ibm / security verify access | 2026-10-08 | 2026-10-12 |
| CVE-2026-11939 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access... |
medium | 5.3 | — | Ibm / security verify access | 2026-10-08 | 2026-10-12 |
| CVE-2026-19494 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access... |
medium | 6.5 | — | Ibm / security verify access | 2026-10-08 | 2026-10-10 |
| CVE-2026-78407 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access... |
medium | 5.4 | — | Ibm / security verify access | 2026-10-08 | 2026-10-09 |
| CVE-2026-19878 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access... |
medium | 6.5 | — | Ibm / security verify access | 2026-10-08 | 2026-10-09 |
| CVE-2026-84244 IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulne... |
medium | 6.1 | — | Ibm / guardium data protection | 2026-10-08 | 2026-10-09 |
| CVE-2026-84274 IBM Guardium Data Protection 12.2.2 is affected by a sensitive information expos... |
medium | 6.5 | — | Ibm / guardium data protection | 2026-10-08 | 2026-10-09 |
| CVE-2026-18156 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
medium | 6.5 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-08 |
| CVE-2026-17646 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
medium | 6.5 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-08 |
| CVE-2026-18124 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local... |
medium | 6.5 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-07 |
| CVE-2026-18131 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
medium | 6.1 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-07 |
| CVE-2026-18132 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
medium | 6.5 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-07 |
| CVE-2026-18133 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
medium | 6.5 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-07 |
| CVE-2026-18179 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
medium | 6.5 | — | Ibm / financial transaction manager | 2026-09-23 | 2026-10-07 |
| CVE-2026-18180 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
medium | 6.5 | — | Ibm / financial transaction manager | 2026-09-23 | 2026-10-07 |
| CVE-2026-18505 IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to op... |
medium | 5.4 | — | Ibm / financial transaction manager | 2026-09-23 | 2026-10-07 |
| CVE-2026-19087 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local... |
medium | 4.4 | — | Ibm / financial transaction manager | 2026-09-23 | 2026-10-07 |
| CVE-2026-19267 IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to mi... |
medium | 6.2 | — | Ibm / financial transaction manager | 2026-09-23 | 2026-10-07 |
| CVE-2026-18161 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
medium | 4.3 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-06 |
| CVE-2026-18170 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
medium | 6.5 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-06 |
| CVE-2026-80423 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
medium | 6.5 | — | Ibm / datastage on cloud pak for data | 2026-09-23 | 2026-10-06 |
| CVE-2026-82890 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
medium | 5.9 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-16432 IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage PxXMLInput operator co... |
medium | 6.5 | — | Ibm / datastage on cloud pak for data | 2026-09-14 | 2026-10-06 |
| CVE-2026-12660 IBM MQ Web Console could allow an authenticated administrator to write files out... |
low | 2.7 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.