October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
16,234
Critical
1,207
High
5,403
Medium
5,749
Low
602
Severity not reported
3,273
In CISA KEV
17
Most affected vendors (by CPE data where available): microsoft (1078), google (711), ibm (140), oracle (117), adobe (110), broadcom (61), apache (45), freerdp (42), linuxfoundation (41), dell (40)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-85476 Loop with unreachable exit condition ('infinite loop') vulnerability in Apache T... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-83632 Allocation of resources without limits or throttling, Integer overflow or wrapar... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-83663 Uncontrolled Recursion vulnerability in Apache Thrift go bindings. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-83745 Memory allocation with excessive size value, Improper handling of length paramet... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-66081 Access of Uninitialized Pointer vulnerability in Apache Thrift c_glib bindings. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-66331 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-03 |
| CVE-2026-66837 Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apa... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-66858 The protocol skip routine in several Apache Thrift bindings did not apply the bi... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-66859 NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-61374 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-03 |
| CVE-2026-63772 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-03 |
| CVE-2026-66054 Allocation of Resources Without Limits or Throttling, Improper Handling of Highl... |
not reported | — | — | — | 2026-10-02 | 2026-10-03 |
| CVE-2026-66055 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-03 |
| CVE-2026-104733 User Impersonation in ProcessOnes XMMP Server ejabberd <= 26.04 allows an attack... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-94653 Inefficient Algorithmic Complexity vulnerability in Apache Thrift PHP bindings. |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-96288 Uncontrolled Recursion, Allocation of resources without limits or throttling vul... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-96292 Inefficient regular expression complexity, Inefficient Algorithmic Complexity vu... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-96294 Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-94636 Improper handling of highly compressed data (data amplification), Function call... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-94637 Improper handling of highly compressed data (data amplification) vulnerability i... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-94638 Allocation of resources without limits or throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-94646 Uncaught exception, Improper validation of specified quantity in input, Improper... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-94648 Allocation of resources without limits or throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-94652 Missing release of memory after effective lifetime vulnerability in Apache Thrif... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-86536 Improperly controlled modification of object prototype attributes ('prototype po... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-86537 Uncaught exception, Loop with unreachable exit condition ('infinite loop'), Inte... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-87117 NULL pointer dereference vulnerability in Apache Thrift PHP bindings. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-90440 Uncaught exception, improper handling of exceptional conditions, improper resour... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-92834 Use of uninitialized resource, Return of wrong status code vulnerability in Apac... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-82458 Memory allocation with excessive size value, Allocation of resources without lim... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-82459 Integer underflow (wrap or wraparound), Out-of-bounds write vulnerability in Apa... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-85086 Improper certificate validation, Initialization of a resource with an insecure d... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-85087 Improper certificate validation, Return of wrong status code vulnerability in Ap... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-85088 Improper Validation of Certificate with Host Mismatch in the C++ and D libraries... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-86535 Loop with unreachable exit condition ('infinite loop'), Improperly controlled mo... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-61373 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-96990 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-94633 Memory allocation with excessive size value, Improper handling of length paramet... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-94642 Uncaught exception vulnerability in Apache Thrift PHP bindings. |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-94644 Allocation of resources without limits or throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.