October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,444
Critical
1,335
High
5,831
Medium
6,240
Low
648
Severity not reported
3,390
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-102069 A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Netwo... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102070 A Reachable Assertion vulnerability in the Two-Way Active Measurement Protocol (... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102059 An Improper Neutralization of Special Elements used in an OS Command ('OS Comman... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102061 A Stack-based Buffer Overflow vulnerability in the phone-home daemon (phcd) of J... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102062 An Use of Externally-Controlled Format String vulnerability in the ipfd daemon o... |
high | 8.1 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102052 A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Net... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102055 A Stack-based Buffer Overflow vulnerability in the cfmd process of Juniper Netwo... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102056 An Out-of-bounds Read vulnerability in the cfmd process of Juniper Networks Juno... |
high | 7.1 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102057 A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Net... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102046 A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in netsct... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102049 A Stack-based Buffer Overflow vulnerability in the l2cpd process of Juniper Netw... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102050 A Stack-based Buffer Overflow vulnerability in the l2cpd daemon of Juniper Netwo... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102044 A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102036 An Integer Overflow or Wraparound vulnerability in the l2ald process of Juniper... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102037 An XML Injection vulnerability in the Unified Threat Management daemon (utmd) of... |
high | 8.1 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102028 A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102029 A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102030 An Incomplete Cleanup vulnerability in the rpd process of Juniper Networks Junos... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102022 A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juni... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102023 A Reachable Assertion vulnerability in fwstatsd of Juniper Networks Junos OS Evo... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102024 An Integer Overflow or Wraparound vulnerability in the routing daemon (rpd) of J... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102025 A Mismatched Memory Management Routines vulnerability in the routing protocol da... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102026 An Improper Control of a Resource Through its Lifetime vulnerability in the rout... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102027 An Incorrect Calculation of Buffer Size vulnerability in the routing protocol da... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102016 An Improper Validation of Specified Quantity in Input vulnerability in the rpd p... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102020 A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102012 A Reachable Assertion vulnerability in the na-grpcd process of Juniper Networks... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102014 A Stack-based Buffer Overflow vulnerability in the authd process of Juniper Netw... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102015 A Heap-based Buffer Overflow vulnerability in the secure-dot1xd process of Junip... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-101994 An Improper Handling of Length Parameter Inconsistency vulnerability in the
l2... |
high | 7.1 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-101997 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Inje... |
high | 8.1 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-101977 A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101978 An OS Command Injection vulnerability in the bootzd zero-touch provisioning daem... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-101967 An OS Command Injection vulnerability in the bootzd zero-touch provisioning daem... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101973 A NULL Pointer Dereference vulnerability in the pkid component of Juniper Networ... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101951 An Improper Validation of Consistency within Input vulnerability in the routing... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101955 A Stack-based Buffer Overflow vulnerability in the UTM Anti-Spam SBL of Juniper... |
high | 8.1 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-101957 An Improper Initialization vulnerability in the routing protocol daemon (rpd) of... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101965 An Use of Externally-Controlled Format String vulnerability in the gRPC daemon o... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101966 A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd o... |
high | 8.2 | — | — | 2026-10-14 | 2026-10-15 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.