October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,444
Critical
1,335
High
5,831
Medium
6,240
Low
648
Severity not reported
3,390
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-107350 Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attac... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-105066 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-104103 Ludwig is a low-code framework for building custom LLMs, neural networks, and ot... |
high | 8.1 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-103081 Improper Control of Generation of Code ('Code Injection') vulnerability in Villa... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102077 An Improper Check for Unusual or Exceptional Conditions vulnerability in the Pac... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101976 An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Jun... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101979 A Stack-based Buffer Overflow vulnerability in the authd Juniper Networks Junos... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101981 A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd)... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-101952 An Improper Validation of Consistency within Input vulnerability in the routing... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-19 |
| CVE-2026-101961 A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matc... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101962 An Improper Handling of Length Parameter Inconsistency vulnerability in the rout... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101963 An Incorrect Calculation vulnerability in the routing protocol daemon (rpd) of J... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-100413 SeaweedFS is a distributed storage system for files and blobs. |
high | 7.1 | — | Seaweedfs / seaweedfs | 2026-10-14 | 2026-10-29 |
| CVE-2026-101949 A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability |
high | 7.2 | Listed | Palo Alto Networks / PAN-OS | 2026-10-14 | 2026-10-15 |
| CVE-2026-92153 F´ (F Prime) is a framework that enables development and deployment of spaceflig... |
high | 7.1 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-92151 F´ (F Prime) is a framework that enables development and deployment of spaceflig... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-86562 A flaw was found in DPDK lib/vhost. |
high | 7.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-86563 A flaw was found in DPDK lib/vhost. |
high | 7.8 | — | — | 2026-10-14 | 2026-10-14 |
| CVE-2026-86565 A flaw was found in DPDK lib/vhost. |
high | 8.2 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-33795 A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-33798 A Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper Networks Ju... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-15102 ADP Desktop SDK contains a vulnerability where sensitive information is transmit... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-19673 ethernet_recv() in subsys/net/l2/ethernet/ethernet.c validates only that the fir... |
high | 7.1 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-103946 An SQL injection vulnerability could allow an authenticated user to read or modi... |
high | 8.3 | — | — | 2026-10-14 | 2026-10-17 |
| CVE-2026-103994 A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon (vgd) of... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102183 An Improper Validation of Specified Quantity in Input vulnerability in the routi... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102184 An Improper Validation of Specified Quantity in Input vulnerability in the routi... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102185 A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the ro... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102176 A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnera... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102177 An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Jun... |
high | 7.6 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102179 An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Jun... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102180 A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd)... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102084 An Improper Validation of Syntactic Correctness of Input vulnerability in the VP... |
high | 8.1 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102174 A Stack-based Buffer Overflow vulnerability in the iked IKE key-management daemo... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102079 An OS command injection vulnerability in the CLI of Juniper Networks Junos OS al... |
high | 7.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102081 A Missing Release of Memory after Effective Lifetime vulnerability in the packet... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102064 A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juni... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102065 An Improper Validation of Specified Quantity in Input vulnerability in the routi... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102068 A Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Ju... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.