October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-75063 IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker... |
medium | 5.4 | — | Ibm / planning analytics | 2026-10-12 | 2026-10-15 |
| CVE-2026-18541 IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting... |
medium | 5.4 | — | Ibm / planning analytics | 2026-10-12 | 2026-10-15 |
| CVE-2026-87980 IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker t... |
medium | 5.5 | — | Ibm / guardium data protection | 2026-10-08 | 2026-10-15 |
| CVE-2026-84230 IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a den... |
medium | 5.9 | — | Ibm / guardium data protection | 2026-10-08 | 2026-10-15 |
| CVE-2026-84247 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
medium | 6.5 | — | Ibm / guardium data protection | 2026-10-08 | 2026-10-14 |
| CVE-2026-78407 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access... |
medium | 5.4 | — | Ibm / security verify access | 2026-10-08 | 2026-10-09 |
| CVE-2026-78399 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access... |
medium | 6.5 | — | Ibm / security verify access | 2026-10-08 | 2026-10-12 |
| CVE-2026-19494 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access... |
medium | 6.5 | — | Ibm / security verify access | 2026-10-08 | 2026-10-10 |
| CVE-2026-19878 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access... |
medium | 6.5 | — | Ibm / security verify access | 2026-10-08 | 2026-10-09 |
| CVE-2026-16830 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access... |
medium | 5.4 | — | Ibm / security verify access | 2026-10-08 | 2026-10-12 |
| CVE-2026-17189 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access... |
medium | 6.1 | — | Ibm / security verify access | 2026-10-08 | 2026-10-13 |
| CVE-2026-11936 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access... |
medium | 5.4 | — | Ibm / security verify access | 2026-10-08 | 2026-10-12 |
| CVE-2026-11939 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access... |
medium | 5.3 | — | Ibm / security verify access | 2026-10-08 | 2026-10-12 |
| CVE-2026-12091 IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access... |
medium | 5.3 | — | Ibm / security verify access | 2026-10-08 | 2026-10-12 |
| CVE-2026-84244 IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulne... |
medium | 6.1 | — | Ibm / guardium data protection | 2026-10-08 | 2026-10-09 |
| CVE-2026-84274 IBM Guardium Data Protection 12.2.2 is affected by a sensitive information expos... |
medium | 6.5 | — | Ibm / guardium data protection | 2026-10-08 | 2026-10-09 |
| CVE-2026-84290 IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validat... |
medium | 5.1 | — | Ibm / guardium data protection | 2026-10-08 | 2026-10-13 |
| CVE-2026-14509 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
medium | 5.9 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-13257 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
medium | 6.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-13258 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
medium | 5.4 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-14273 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
medium | 6.5 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-14 |
| CVE-2026-16182 IBM DataPower Gateway 10.5.0.0 through 10.5.0.0 through 10.5.0.22, 10.6.1 throug... |
medium | 5.9 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-14521 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
medium | 4.9 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-16177 IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.... |
medium | 5.3 | — | Ibm / datapower gateway | 2026-10-08 | 2026-10-15 |
| CVE-2026-3303 IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which co... |
low | 3.7 | — | Ibm / concert | 2026-10-19 | 2026-11-03 |
| CVE-2026-4405 IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which c... |
low | 3.3 | — | Ibm / concert | 2026-10-19 | 2026-11-03 |
| CVE-2026-1501 IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation. |
low | 3.7 | — | Ibm / concert | 2026-10-19 | 2026-11-03 |
| CVE-2026-12660 IBM MQ Web Console could allow an authenticated administrator to write files out... |
low | 2.7 | — | Ibm / mq operator | 2026-10-19 | 2026-10-23 |
| CVE-2026-17068 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version... |
low | 3.3 | — | Ibm / i | 2026-10-16 | 2026-10-23 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.