October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,479
Critical
1,340
High
5,869
Medium
6,256
Low
648
Severity not reported
3,366
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-107348 Integer overflow in the message buffer growth logic (mbuf_make_room) in PgBounce... |
medium | 5.9 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-103975 Appium is a cross-platform automation framework for all kinds of apps, built on... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-101964 A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juni... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101972 An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101975 A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juni... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101959 A Function Call With Incorrect Variable or Reference as Argument vulnerability i... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-93635 LDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allow... |
medium | 5.3 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-75083 The receive path of the NXP KW41Z IEEE 802.15.4 driver, kw41z_rx() in drivers/ie... |
medium | 5.9 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-75084 The CC1200 sub-GHz IEEE 802.15.4 driver takes the PHY packet length from the fir... |
medium | 6.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-75085 The STM32WBA IEEE 802.15.4 driver in drivers/ieee802154/ieee802154_stm32wba.c co... |
medium | 4.2 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-103993 An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Jun... |
medium | 6.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102082 An Improper Handling of Missing Special Element vulnerability in the SSL plugin... |
medium | 5.9 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102083 An Improper Resource Locking vulnerability in the UTM processing of Juniper Netw... |
medium | 5.9 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102085 An Improper Restriction of Communication Channel to Intended Endpoints vulnerabi... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102086 A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks J... |
medium | 5.9 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102087 An Incomplete List of Disallowed Inputs vulnerability in the routing protocol da... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102071 A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juni... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102072 An Improper Handling of Highly Compressed Data vulnerability in the gRPC library... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102078 A Use After Free vulnerability in the packet forwarding engine (pfe) of Juniper... |
medium | 5.9 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102080 An Improper Resource Locking vulnerability in the clock synchronization daemon (... |
medium | 5.3 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102066 A Improper Validation of Specified Quantity in Input vulnerability in the routin... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-19 |
| CVE-2026-102067 An Improper Validation of Specified Quantity in Input vulnerability in the routi... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102058 A Reachable Assertion vulnerability in the bfdd daemon of Juniper Networks Junos... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102060 A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102063 A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juni... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102053 An Improper Release of Memory Before Removing Last Reference vulnerability in th... |
medium | 5.3 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102054 An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of... |
medium | 4.3 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102047 An Improper Validation of Consistency within Input vulnerability in the l2cpd pr... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102048 An Allocation of Resources Without Limits or Throttling vulnerability in the l2c... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102051 An Improper Release of Memory Before Removing Last Reference vulnerability in th... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102039 A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102040 A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Ne... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102041 A Reachable Assertion vulnerability in the rpd routing daemon of Juniper Network... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102042 A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102043 A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102045 An Out-of-bounds Write Out-of-bounds Write vulnerability in lacpd of Juniper Net... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102033 An Improper Validation of Specified Quantity in Input vulnerability in l2ald of... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102034 A Reachable Assertion vulnerability in the l2ald daemon of Juniper Networks Juno... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102035 A Reachable Assertion vulnerability in the l2ald process of Juniper Networks Jun... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102032 A Missing Release of Memory after Effective Lifetime vulnerability in the l2ald... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.