October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
22,200
Critical
3,101
High
7,090
Medium
6,614
Low
672
Severity not reported
4,723
In CISA KEV
188
Most affected vendors (by CPE data where available): microsoft (1176), google (780), ibm (323), mozilla (182), oracle (154), adobe (137), linux (125), apache (116), broadcom (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-15065 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker... |
critical | 9.1 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-15068 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote authentic... |
critical | 9.9 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-16656 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to g... |
critical | 9.8 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-16816 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated... |
critical | 9.9 | — | Ibm / vios | 2026-08-19 | 2026-10-27 |
| CVE-2026-5935 IBM Total Storage Service Console (TSSC) / TS4500 IMC 9.2, 9.3, 9.4, 9.5, 9.6 TS... |
critical | 9.8 | — | Ibm / total storage service console | 2026-04-23 | 2026-10-26 |
| CVE-2026-4101 IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify... |
critical | 9.8 | — | Ibm / security verify access | 2026-04-01 | 2026-10-26 |
| CVE-2026-2311 IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by... |
critical | 9.8 | — | Ibm / i | 2026-04-30 | 2026-10-26 |
| CVE-2026-17423 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to o... |
critical | 9.1 | — | Ibm / vios | 2026-08-20 | 2026-10-26 |
| CVE-2026-17436 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e... |
critical | 9.8 | — | Ibm / vios | 2026-08-20 | 2026-10-26 |
| CVE-2026-18670 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to c... |
critical | 9.1 | — | Ibm / vios | 2026-08-20 | 2026-10-26 |
| CVE-2026-18716 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated... |
critical | 9.1 | — | Ibm / vios | 2026-08-20 | 2026-10-26 |
| CVE-2026-18832 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e... |
critical | 9.8 | — | Ibm / vios | 2026-08-20 | 2026-10-26 |
| CVE-2026-19437 IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e... |
critical | 9.8 | — | Ibm / vios | 2026-08-20 | 2026-10-26 |
| CVE-2026-9006 IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side reque... |
critical | 9.1 | — | Ibm / websphere application server | 2026-06-22 | 2026-10-25 |
| CVE-2026-9072 IBM WebSphere Application Server and IBM WebSphere Application Server Liberty -... |
critical | 9.8 | — | Ibm / i | 2026-06-22 | 2026-10-25 |
| CVE-2026-11546 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected... |
critical | 9.8 | — | Ibm / websphere application server | 2026-06-30 | 2026-10-25 |
| CVE-2026-11714 IBM WebSphere Application Server Liberty is affected by a server-side request fo... |
critical | 9.8 | — | Ibm / websphere application server | 2026-06-30 | 2026-10-25 |
| CVE-2026-13449 IBM Business Automation Manager Open Editions 9.0.0 through 9.4.2 is vulnerable... |
critical | 9.1 | — | Ibm / business automation manager | 2026-06-30 | 2026-10-25 |
| CVE-2026-13772 IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 's Object Query Language eng... |
critical | 9.9 | — | Ibm / websphere extreme scale | 2026-06-30 | 2026-10-25 |
| CVE-2026-13773 IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 Approximately 50 generated C... |
critical | 10.0 | — | Ibm / websphere extreme scale | 2026-06-30 | 2026-10-25 |
| CVE-2026-11541 IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebS... |
critical | 9.8 | — | Ibm / websphere application server | 2026-06-30 | 2026-10-25 |
| CVE-2026-3144 IBM API Connect 12.1.0.0 through 12.1.0.3 uses default credentials which could a... |
critical | 9.8 | — | Ibm / api connect | 2026-07-08 | 2026-10-25 |
| CVE-2026-9074 IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains... |
critical | 9.8 | — | Ibm / api connect | 2026-07-08 | 2026-10-25 |
| CVE-2026-13473 IBM Storage Protect Client 8.1.0.0 through 8.1.27.0, 8.1.27.1, and 8.2.0.0 throu... |
critical | 9.8 | — | Ibm / storage protect | 2026-07-17 | 2026-10-24 |
| CVE-2026-16184 IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to b... |
critical | 9.8 | — | Ibm / websphere application server | 2026-07-28 | 2026-10-23 |
| CVE-2026-14974 IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote a... |
critical | 9.8 | — | Ibm / websphere application server | 2026-07-28 | 2026-10-23 |
| CVE-2026-14976 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected... |
critical | 9.8 | — | Ibm / websphere application server | 2026-07-28 | 2026-10-23 |
| CVE-2026-14522 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.... |
critical | 9.8 | — | Ibm / app connect enterprise | 2026-07-30 | 2026-10-23 |
| CVE-2026-12118 IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated... |
critical | 9.8 | — | Ibm / webmethods integration | 2026-07-30 | 2026-10-23 |
| CVE-2026-10025 IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 00... |
critical | 9.8 | — | Ibm / qradar security information and event manager | 2026-08-05 | 2026-10-23 |
| CVE-2026-17617 IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side... |
critical | 9.8 | — | Ibm / application gateway operator | 2026-08-05 | 2026-10-23 |
| CVE-2026-18847 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to ha... |
critical | 9.8 | — | Ibm / i | 2026-08-12 | 2026-10-23 |
| CVE-2026-16860 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to exec... |
critical | 9.9 | — | Ibm / i | 2026-08-12 | 2026-10-23 |
| CVE-2026-17276 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to esca... |
critical | 9.9 | — | Ibm / i | 2026-08-12 | 2026-10-23 |
| CVE-2026-17111 IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection. |
critical | 9.8 | — | Ibm / i | 2026-08-12 | 2026-10-23 |
| CVE-2026-10543 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privil... |
critical | 9.8 | — | Ibm / db2 | 2026-08-12 | 2026-10-23 |
| CVE-2026-13433 IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to do... |
critical | 9.6 | — | Ibm / i access client solutions | 2026-08-12 | 2026-10-23 |
| CVE-2026-10534 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer... |
critical | 9.8 | — | Ibm / db2 | 2026-08-12 | 2026-10-23 |
| CVE-2026-12665 IBM MQ could allow a remote attacker to execute arbitrary code due to a stack bu... |
critical | 9.8 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-93909 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnera... |
critical | 9.1 | — | Ibm / websphere application server | 2026-10-13 | 2026-10-22 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.