October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
16,863
Critical
1,275
High
5,585
Medium
5,952
Low
622
Severity not reported
3,429
In CISA KEV
19
Most affected vendors (by CPE data where available): microsoft (1296), google (733), ibm (140), oracle (120), adobe (120), broadcom (61), apache (45), freerdp (42), linuxfoundation (41), dell (40)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-66054 Allocation of Resources Without Limits or Throttling, Improper Handling of Highl... |
not reported | — | — | — | 2026-10-02 | 2026-10-03 |
| CVE-2026-66055 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-03 |
| CVE-2026-104733 User Impersonation in ProcessOnes XMMP Server ejabberd <= 26.04 allows an attack... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-94653 Inefficient Algorithmic Complexity vulnerability in Apache Thrift PHP bindings. |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-96288 Uncontrolled Recursion, Allocation of resources without limits or throttling vul... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-96292 Inefficient regular expression complexity, Inefficient Algorithmic Complexity vu... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-96294 Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-94636 Improper handling of highly compressed data (data amplification), Function call... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-94637 Improper handling of highly compressed data (data amplification) vulnerability i... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-94638 Allocation of resources without limits or throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-94646 Uncaught exception, Improper validation of specified quantity in input, Improper... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-94648 Allocation of resources without limits or throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-94652 Missing release of memory after effective lifetime vulnerability in Apache Thrif... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-86536 Improperly controlled modification of object prototype attributes ('prototype po... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-86537 Uncaught exception, Loop with unreachable exit condition ('infinite loop'), Inte... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-87117 NULL pointer dereference vulnerability in Apache Thrift PHP bindings. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-90440 Uncaught exception, improper handling of exceptional conditions, improper resour... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-92834 Use of uninitialized resource, Return of wrong status code vulnerability in Apac... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-82458 Memory allocation with excessive size value, Allocation of resources without lim... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-82459 Integer underflow (wrap or wraparound), Out-of-bounds write vulnerability in Apa... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-85086 Improper certificate validation, Initialization of a resource with an insecure d... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-85087 Improper certificate validation, Return of wrong status code vulnerability in Ap... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-85088 Improper Validation of Certificate with Host Mismatch in the C++ and D libraries... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-86535 Loop with unreachable exit condition ('infinite loop'), Improperly controlled mo... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-61373 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-96990 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-94633 Memory allocation with excessive size value, Improper handling of length paramet... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-94642 Uncaught exception vulnerability in Apache Thrift PHP bindings. |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-94644 Allocation of resources without limits or throttling vulnerability in Apache Thr... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-94645 Improper validation of specified quantity in input, Allocation of resources with... |
not reported | — | — | — | 2026-10-02 | 2026-10-05 |
| CVE-2026-94650 Uncontrolled Recursion vulnerability in Apache Thrift c_glib bindings. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-91135 Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-91137 Improper validation of specified quantity in input, Allocation of resources with... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-93925 Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-93926 Missing release of memory after effective lifetime, Missing release of resource... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-86325 A stack-based buffer overflow vulnerability exists in protocol gateways' account... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-86326 An improper verification of cryptographic signature vulnerability exists in prot... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-85483 Use of uninitialized resource, Return of wrong status code vulnerability in Apac... |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-85493 Uncontrolled Recursion vulnerability in Apache Thrift Dart and Java ME bindings. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
| CVE-2026-59666 Cross-Site Scripting vulnerability in the Repasat application. |
not reported | — | — | — | 2026-10-02 | 2026-10-02 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.