October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
16,209
Critical
1,207
High
5,399
Medium
5,736
Low
600
Severity not reported
3,267
In CISA KEV
17
Most affected vendors (by CPE data where available): microsoft (1078), google (711), ibm (140), oracle (117), adobe (110), broadcom (61), apache (45), freerdp (42), linuxfoundation (41), dell (40)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-15781 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.0 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-15784 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.1 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-15819 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-15822 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-15824 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.2 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16111 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16159 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.6 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16178 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16179 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16181 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.4 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16169 IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16170 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16176 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-14511 IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a deni... |
medium | 6.5 | — | Ibm / mq | 2026-10-19 | 2026-10-23 |
| CVE-2026-12669 IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds re... |
medium | 4.3 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-12670 IBM MQ could allow an authenticated attacker to cause a denial of service throug... |
medium | 6.5 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-12727 IBM MQ could allow an authenticated attacker to cause potential process instabil... |
medium | 4.3 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-12350 IBM MQ could allow an authenticated attacker to cause a denial of service by sen... |
medium | 6.5 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-12155 IBM MQ could allow an authenticated attacker to cause a denial of service by sen... |
medium | 6.5 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-12343 IBM MQ could allow an authenticated attacker to cause a denial of service due to... |
medium | 6.5 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-11828 IBM MQ could allow a remote attacker with queue manager control or man-in-the-mi... |
medium | 5.9 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-11829 IBM MQ could allow an authenticated attacker to cause a denial of service due to... |
medium | 6.5 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-11831 IBM MQ could allow an authenticated attacker to cause a limited denial of servic... |
medium | 5.4 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-17073 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive in... |
medium | 5.5 | — | Ibm / i | 2026-10-16 | 2026-10-23 |
| CVE-2026-17275 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthoriz... |
medium | 5.3 | — | Ibm / i | 2026-10-16 | 2026-10-23 |
| CVE-2026-17488 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypa... |
medium | 6.5 | — | Ibm / i | 2026-10-16 | 2026-10-23 |
| CVE-2026-17491 IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to b... |
medium | 5.4 | — | Ibm / i | 2026-10-16 | 2026-10-23 |
| CVE-2026-107674 IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Cer... |
medium | 4.4 | — | Ibm / i | 2026-10-16 | 2026-10-23 |
| CVE-2026-17487 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user pro... |
medium | 5.3 | — | Ibm / i | 2026-10-13 | 2026-10-14 |
| CVE-2026-18318 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-forc... |
medium | 5.3 | — | Ibm / i | 2026-10-13 | 2026-10-14 |
| CVE-2026-18343 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP ta... |
medium | 4.4 | — | Ibm / i | 2026-10-13 | 2026-10-14 |
| CVE-2026-93886 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to exec... |
medium | 5.4 | — | Ibm / i | 2026-10-13 | 2026-10-14 |
| CVE-2026-17484 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of s... |
medium | 5.5 | — | Ibm / i | 2026-10-13 | 2026-10-14 |
| CVE-2026-82103 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
medium | 6.5 | — | Ibm / datastage on cloud pak for data | 2026-10-12 | 2026-10-14 |
| CVE-2026-75063 IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker... |
medium | 5.4 | — | Ibm / planning analytics | 2026-10-12 | 2026-10-15 |
| CVE-2026-18541 IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting... |
medium | 5.4 | — | Ibm / planning analytics | 2026-10-12 | 2026-10-15 |
| CVE-2026-87980 IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker t... |
medium | 5.5 | — | Ibm / guardium data protection | 2026-10-08 | 2026-10-15 |
| CVE-2026-84230 IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a den... |
medium | 5.9 | — | Ibm / guardium data protection | 2026-10-08 | 2026-10-15 |
| CVE-2026-84247 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
medium | 6.5 | — | Ibm / guardium data protection | 2026-10-08 | 2026-10-14 |
| CVE-2026-78407 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access... |
medium | 5.4 | — | Ibm / security verify access | 2026-10-08 | 2026-10-09 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.