October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
16,209
Critical
1,207
High
5,399
Medium
5,736
Low
600
Severity not reported
3,267
In CISA KEV
17
Most affected vendors (by CPE data where available): microsoft (1078), google (711), ibm (140), oracle (117), adobe (110), broadcom (61), apache (45), freerdp (42), linuxfoundation (41), dell (40)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-87662 Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of sp... |
medium | 6.7 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87663 An authentication bypass and command injection vulnerability exists in the inter... |
medium | 6.7 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87677 An OS command injection vulnerability exists in the account management subsystem... |
medium | 6.6 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2023-5648 In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers... |
medium | 6.1 | — | Broadcom / brocade active support connectivity gateway | 2026-10-08 | 2026-10-14 |
| CVE-2023-5649 An Improper Input Validation vulnerability for the registered case credentials i... |
medium | 5.5 | — | Broadcom / brocade active support connectivity gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-94575 A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management... |
medium | 5.7 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-94580 An arbitrary file and directory deletion vulnerability exists in the REST API ma... |
medium | 4.5 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87685 An arbitrary file manipulation vulnerability exists in the WebTools management i... |
medium | 6.8 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87688 An input validation vulnerability exists in the security certificate management... |
medium | 6.8 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87675 An OS command injection vulnerability exists in the configuration management sub... |
medium | 6.8 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87667 An argument injection vulnerability exists in the configuration management comma... |
medium | 4.5 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87678 An input validation and output encoding vulnerability exists in the web manageme... |
medium | 5.2 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87686 An authentication and access control bypass vulnerability exists in the web serv... |
medium | 4.3 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87668 A stack-based buffer overflow vulnerability exists in the diagnostic execution u... |
medium | 6.5 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-13 |
| CVE-2026-87669 A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST A... |
medium | 4.3 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-13 |
| CVE-2026-87670 An authorization logic vulnerability exists in the Brocade Fabric OS versions be... |
medium | 4.3 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-13 |
| CVE-2026-87672 An information disclosure vulnerability exists in the SupportLink diagnostic col... |
medium | 5.5 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87676 A stack-based buffer overflow vulnerability exists in the security library compo... |
medium | 5.7 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-87681 An Access Control Bypass vulnerability exists in the Role-Based Access Control (... |
medium | 6.3 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-13 |
| CVE-2026-94584 A race condition and thread-safety vulnerability exists in the web management da... |
low | 2.6 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
| CVE-2026-94583 A race condition vulnerability exists in the request processing logic of the RES... |
low | 2.6 | — | Broadcom / fabric operating system | 2026-10-08 | 2026-10-14 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.