October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,479
Critical
1,340
High
5,869
Medium
6,256
Low
648
Severity not reported
3,366
In CISA KEV
20
Most affected vendors (by CPE data where available): microsoft (1307), google (756), oracle (156), ibm (140), adobe (138), broadcom (61), langflow (57), apache (45), freerdp (42), linuxfoundation (41)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-102021 A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102017 An Out-of-bounds Write vulnerability in the rpd process of Juniper Networks Juno... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102018 A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102019 An Improper Validation of Specified Quantity in Input vulnerability in the rpd p... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102000 A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102011 A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-102013 A NULL Pointer Dereference vulnerability in the na-grpcd process of Juniper Netw... |
medium | 4.4 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101993 A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juni... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101995 An Improper Validation of Specified Quantity in Input vulnerability in the
l2a... |
medium | 4.3 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101996 A Reachable Assertion vulnerability in the
l2ald
daemon of Juniper Networks... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101999 A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101987 An Improper Validation of Specified Quantity in Input vulnerability in the routi... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-29 |
| CVE-2026-101988 A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101989 A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juni... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101992 An Improper Input Validation vulnerability in the routing protocol daemon (rpd)... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101974 An Improper Validation of Specified Quantity in Input vulnerability in rpd of Ju... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-29 |
| CVE-2026-101984 A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juni... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101985 A Improper Validation of Specified Quantity in Input vulnerability in the routin... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101968 An Integer Underflow (Wrap or Wraparound) vulnerability in the rpd process of Ju... |
medium | 5.4 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-101969 An Improper Input Validation vulnerability in the rpd process of Juniper Network... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101970 A Use After Free vulnerability in the rpd PIM Join/Prune processing of Juniper N... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101971 An Allocation of Resources Without Limits or Throttling vulnerability in rpd, th... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101960 An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Jun... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101937 A Signed to Unsigned Conversion Error vulnerability in the srxpfe of Juniper Net... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101938 An Integer Underflow (Wrap or Wraparound) vulnerability in the srxpfe of Juniper... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101934 An Out-of-bounds Write vulnerability in eventd of Juniper Networks Junos OS and... |
medium | 4.4 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101936 A Reachable Assertion vulnerability in the srxpfe process of Juniper Networks Ju... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-91883 Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Inser... |
medium | 4.3 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-93683 A flaw was found in the DPDK vhost library. |
medium | 6.4 | — | — | 2026-10-14 | 2026-10-14 |
| CVE-2026-89069 Improper neutralization of input during web page generation ('cross-site scripti... |
medium | 5.4 | — | Progress / moveit transfer | 2026-10-14 | 2026-10-19 |
| CVE-2026-86561 A flaw was found in DPDK lib/vhost. |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-20 |
| CVE-2026-76113 Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an E... |
medium | 4.3 | — | — | 2026-10-14 | 2026-10-18 |
| CVE-2026-62858 YOURLS is a self-hosted, customizable URL shortener written in PHP. |
medium | 5.3 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-110718 TurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vul... |
medium | 5.9 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-110712 libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_dec... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-110713 libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_dec... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-110714 libsmb2 through 6.2 contains an integer underflow vulnerability in decode_acl th... |
medium | 6.5 | — | — | 2026-10-14 | 2026-10-20 |
| CVE-2026-110715 MuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write vulnerabili... |
medium | 6.1 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-110716 unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshi... |
medium | 5.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-110717 Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the... |
medium | 5.3 | — | — | 2026-10-14 | 2026-10-16 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.