October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
16,204
Critical
1,207
High
5,399
Medium
5,731
Low
600
Severity not reported
3,267
In CISA KEV
17
Most affected vendors (by CPE data where available): microsoft (1078), google (711), ibm (140), oracle (117), adobe (110), broadcom (61), apache (45), freerdp (42), linuxfoundation (41), dell (40)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-97468 Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated... |
critical | 9.1 | — | Apache / cxf | 2026-10-09 | 2026-10-20 |
| CVE-2026-107938 In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-net... |
critical | 9.1 | — | Apache / cxf | 2026-10-09 | 2026-10-16 |
| CVE-2026-71575 The max_age authentication-freshness check in OidcClientCodeRequestFilter was in... |
critical | 9.1 | — | Apache / cxf | 2026-10-09 | 2026-10-16 |
| CVE-2026-92414 : Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabb... |
critical | 9.1 | — | Apache / jackrabbit | 2026-10-07 | 2026-10-13 |
| CVE-2026-104711 Improper neutralization of special elements used in an expression language state... |
critical | 9.8 | — | Apache / struts | 2026-10-05 | 2026-10-08 |
| CVE-2026-59797 Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via... |
critical | 9.8 | — | Apache / http server | 2026-10-01 | 2026-10-05 |
| CVE-2026-57941 Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared sessio... |
critical | 9.8 | — | Apache / http server | 2026-10-01 | 2026-10-05 |
| CVE-2026-56154 Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using look... |
critical | 9.8 | — | Apache / http server | 2026-10-01 | 2026-10-05 |
| CVE-2026-86463 Apache CXF's FIQL query parser has a vulnerability in how it searches for operat... |
high | 7.5 | — | Apache / cxf | 2026-10-09 | 2026-10-20 |
| CVE-2026-97791 In Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a... |
high | 7.5 | — | Apache / cxf | 2026-10-09 | 2026-10-20 |
| CVE-2026-107937 In Apache CXF, the parser for multipart/MTOM attachment part headers did not ful... |
high | 7.5 | — | Apache / cxf | 2026-10-09 | 2026-10-16 |
| CVE-2026-108039 By default, StaxUtils placed no limit on the total number of elements or the tot... |
high | 7.5 | — | Apache / cxf | 2026-10-09 | 2026-10-16 |
| CVE-2026-73179 Improper enforcement of single-use authorization code semantics in the JPA OAuth... |
high | 8.1 | — | Apache / cxf | 2026-10-09 | 2026-10-20 |
| CVE-2026-78384 CompressionUtils.inflate() decompressed attacker-controlled DEFLATE data with no... |
high | 7.5 | — | Apache / cxf | 2026-10-09 | 2026-10-20 |
| CVE-2026-100227 Improper Verification of Cryptographic Signature vulnerability in Apache CXF's J... |
high | 7.5 | — | Apache / cxf | 2026-10-09 | 2026-10-16 |
| CVE-2026-104712 Asymmetric resource consumption (amplification) vulnerability in Apache Struts. |
high | 7.5 | — | Apache / struts | 2026-10-05 | 2026-10-08 |
| CVE-2026-104714 Concurrent execution using shared resource with improper synchronization ('race... |
high | 8.8 | — | Apache / struts | 2026-10-05 | 2026-10-08 |
| CVE-2026-93546 Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an au... |
high | 8.8 | — | Apache / http server | 2026-10-01 | 2026-10-05 |
| CVE-2026-73637 Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Serv... |
high | 7.3 | — | Apache / http server | 2026-10-01 | 2026-10-05 |
| CVE-2026-63718 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')... |
high | 7.5 | — | Apache / http server | 2026-10-01 | 2026-10-06 |
| CVE-2026-73636 Authentication bypass by capture-replay in mod_auth_digest in Apache Software Fo... |
high | 8.1 | — | Apache / http server | 2026-10-01 | 2026-10-05 |
| CVE-2026-59685 Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while process... |
high | 7.5 | — | Apache / http server | 2026-10-01 | 2026-10-05 |
| CVE-2026-63045 Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Softwar... |
high | 7.5 | — | Apache / http server | 2026-10-01 | 2026-10-05 |
| CVE-2026-63292 Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apa... |
high | 7.5 | — | Apache / http server | 2026-10-01 | 2026-10-05 |
| CVE-2026-63686 A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache H... |
high | 7.5 | — | Apache / http server | 2026-10-01 | 2026-10-05 |
| CVE-2026-56153 Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite. |
high | 7.5 | — | Apache / http server | 2026-10-01 | 2026-10-02 |
| CVE-2026-56449 Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with cr... |
high | 7.5 | — | Apache / http server | 2026-10-01 | 2026-10-21 |
| CVE-2026-48005 Missing authentication checks in mod_auth_digest in Apache Software Foundation A... |
high | 7.5 | — | Apache / http server | 2026-10-01 | 2026-10-06 |
| CVE-2026-46729 NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_heartmonitor o... |
high | 7.5 | — | Apache / http server | 2026-10-01 | 2026-10-08 |
| CVE-2026-47360 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apac... |
high | 7.5 | — | Apache / http server | 2026-10-01 | 2026-10-02 |
| CVE-2026-95664 Improper Neutralization of Special Elements used in an Expression Language State... |
medium | 5.4 | — | Apache / camel | 2026-10-26 | 2026-10-28 |
| CVE-2026-79650 Apache CXF’s OIDC relying-party component could redirect users to an attacker-co... |
medium | 6.1 | — | Apache / cxf | 2026-10-09 | 2026-10-20 |
| CVE-2026-92415 — Use of Externally-Controlled Input to Select Classes or Code vulnerability in... |
medium | 5.3 | — | Apache / jackrabbit | 2026-10-07 | 2026-10-13 |
| CVE-2026-90466 Path traversal of 'trusted_jar_paths' in Impala 4.5.2 allows an attacker-control... |
medium | 6.5 | — | Apache / impala | 2026-10-07 | 2026-10-13 |
| CVE-2026-105242 Improper Handling of Exceptional Conditions vulnerability in the aspnet-request... |
medium | 5.3 | — | Apache / log4net | 2026-10-06 | 2026-10-09 |
| CVE-2026-105243 Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. |
medium | 5.3 | — | Apache / log4net | 2026-10-06 | 2026-10-09 |
| CVE-2026-105244 Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppende... |
medium | 5.3 | — | Apache / log4net | 2026-10-06 | 2026-10-09 |
| CVE-2026-105239 Improper Neutralization of Null Byte or NUL Character vulnerability in the Event... |
medium | 5.3 | — | Apache / log4net | 2026-10-06 | 2026-10-09 |
| CVE-2026-105240 Improper Neutralization of Null Byte or NUL Character vulnerability in the Outpu... |
medium | 5.3 | — | Apache / log4net | 2026-10-06 | 2026-10-09 |
| CVE-2026-105241 Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender... |
medium | 5.3 | — | Apache / log4net | 2026-10-06 | 2026-10-09 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.