October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-16165 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-16167 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-15781 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.0 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-15784 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.1 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-15819 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-15822 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-15824 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.2 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16111 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16159 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 8.6 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16178 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16179 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16181 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.4 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16169 IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16170 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16176 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
high | 7.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-3628 IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of... |
medium | 5.3 | — | Ibm / concert | 2026-10-19 | 2026-11-03 |
| CVE-2026-4413 IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. |
medium | 6.1 | — | Ibm / concert | 2026-10-19 | 2026-11-03 |
| CVE-2026-1510 IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap I... |
medium | 4.7 | — | Ibm / concert | 2026-10-19 | 2026-11-03 |
| CVE-2026-14511 IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a deni... |
medium | 6.5 | — | Ibm / mq | 2026-10-19 | 2026-10-23 |
| CVE-2026-15661 IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data in... |
medium | 5.3 | — | Ibm / concert | 2026-10-19 | 2026-11-03 |
| CVE-2026-12669 IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds re... |
medium | 4.3 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-12670 IBM MQ could allow an authenticated attacker to cause a denial of service throug... |
medium | 6.5 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-12727 IBM MQ could allow an authenticated attacker to cause potential process instabil... |
medium | 4.3 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-12350 IBM MQ could allow an authenticated attacker to cause a denial of service by sen... |
medium | 6.5 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-12155 IBM MQ could allow an authenticated attacker to cause a denial of service by sen... |
medium | 6.5 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-12343 IBM MQ could allow an authenticated attacker to cause a denial of service due to... |
medium | 6.5 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-11828 IBM MQ could allow a remote attacker with queue manager control or man-in-the-mi... |
medium | 5.9 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-11829 IBM MQ could allow an authenticated attacker to cause a denial of service due to... |
medium | 6.5 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-11831 IBM MQ could allow an authenticated attacker to cause a limited denial of servic... |
medium | 5.4 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-17073 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive in... |
medium | 5.5 | — | Ibm / i | 2026-10-16 | 2026-10-23 |
| CVE-2026-17275 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthoriz... |
medium | 5.3 | — | Ibm / i | 2026-10-16 | 2026-10-23 |
| CVE-2026-17488 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypa... |
medium | 6.5 | — | Ibm / i | 2026-10-16 | 2026-10-23 |
| CVE-2026-17491 IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to b... |
medium | 5.4 | — | Ibm / i | 2026-10-16 | 2026-10-23 |
| CVE-2026-107674 IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Cer... |
medium | 4.4 | — | Ibm / i | 2026-10-16 | 2026-10-23 |
| CVE-2026-17487 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user pro... |
medium | 5.3 | — | Ibm / i | 2026-10-13 | 2026-10-14 |
| CVE-2026-18318 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-forc... |
medium | 5.3 | — | Ibm / i | 2026-10-13 | 2026-10-14 |
| CVE-2026-18343 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP ta... |
medium | 4.4 | — | Ibm / i | 2026-10-13 | 2026-10-14 |
| CVE-2026-93886 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to exec... |
medium | 5.4 | — | Ibm / i | 2026-10-13 | 2026-10-14 |
| CVE-2026-17484 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of s... |
medium | 5.5 | — | Ibm / i | 2026-10-13 | 2026-10-14 |
| CVE-2026-82103 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
medium | 6.5 | — | Ibm / datastage on cloud pak for data | 2026-10-12 | 2026-10-14 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.