October 2026 CVE archive
Records last modified in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
21,639
Critical
3,114
High
7,009
Medium
6,780
Low
599
Severity not reported
4,137
In CISA KEV
186
Most affected vendors (by CPE data where available): microsoft (1423), linux (722), google (413), ibm (321), oracle (193), mozilla (182), adobe (165), broadcom (118), apache (113), fabian (98)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-16169 IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16170 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16176 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16178 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16179 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16181 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.4 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-15781 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.0 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-15784 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.1 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-15819 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-15822 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-15824 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.2 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16111 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16159 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.6 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16161 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16163 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.6 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16164 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16165 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-16167 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-14496 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.2 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-14497 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.1 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-82096 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-10-12 | 2026-10-14 |
| CVE-2026-82108 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-10-12 | 2026-10-14 |
| CVE-2026-84418 IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attack... |
high | 7.4 | — | Ibm / datastage on cloud pak for data | 2026-10-12 | 2026-10-14 |
| CVE-2026-81858 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to caus... |
high | 8.1 | — | Ibm / i | 2026-10-13 | 2026-10-14 |
| CVE-2026-73600 Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buf... |
high | 7.8 | — | Dell / powerprotect data manager | 2026-09-03 | 2026-10-14 |
| CVE-2026-85455 MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOS... |
high | 8.2 | — | Themoos / core-moos | 2026-09-03 | 2026-10-14 |
| CVE-2026-85451 MOOS core-moos through 10.4.0 contains a remote process termination vulnerabilit... |
high | 7.1 | — | Themoos / core-moos | 2026-09-03 | 2026-10-14 |
| CVE-2026-85450 MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the... |
high | 7.5 | — | Themoos / core-moos | 2026-09-03 | 2026-10-14 |
| CVE-2026-85449 MOOS-IvP pMarineViewer through 24.8.1 fails to limit the number of tracked node... |
high | 7.5 | — | Mit / moos-ivp | 2026-09-03 | 2026-10-14 |
| CVE-2026-85448 MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed com... |
high | 7.5 | — | Mit / moos-ivp | 2026-09-03 | 2026-10-14 |
| CVE-2026-85447 MOOS-IvP pRealm through version 24.8.1 accepts unbounded REALMCAST_REQ subscript... |
high | 7.5 | — | Mit / moos-ivp | 2026-09-03 | 2026-10-14 |
| CVE-2026-85446 MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in... |
high | 7.5 | — | Mit / moos-ivp | 2026-09-03 | 2026-10-14 |
| CVE-2026-85445 MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxe... |
high | 7.5 | — | Mit / moos-ivp | 2026-09-03 | 2026-10-14 |
| CVE-2026-85444 MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted(),... |
high | 7.5 | — | Mit / moos-ivp | 2026-09-03 | 2026-10-14 |
| CVE-2026-85443 MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOS... |
high | 7.5 | — | Themoos / core-moos | 2026-09-03 | 2026-10-14 |
| CVE-2026-85442 MOOS core-moos through 10.4.0 fails to validate packet length declarations in CM... |
high | 7.5 | — | Themoos / core-moos | 2026-09-03 | 2026-10-14 |
| CVE-2026-85441 MOOS core-moos through 10.4.0 fails to validate that serialized string lengths a... |
high | 7.5 | — | Themoos / core-moos | 2026-09-03 | 2026-10-14 |
| CVE-2026-85439 MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsp... |
high | 7.8 | — | Mit / moos-ivp | 2026-09-03 | 2026-10-14 |
| CVE-2026-85436 MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in C... |
high | 7.5 | — | Themoos / essential-moos | 2026-09-03 | 2026-10-14 |
| CVE-2026-78501 Improper neutralization of special elements used in a command ('command injectio... |
high | 8.6 | — | Microsoft / 365 copilot chat | 2026-09-17 | 2026-10-14 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.