Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

October 2026 CVE archive

Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in October 2026Materially updated (Critical / KEV)
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21

Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-92153
F´ (F Prime) is a framework that enables development and deployment of spaceflig...
high 7.1 —— 2026-10-142026-10-15
CVE-2026-92151
F´ (F Prime) is a framework that enables development and deployment of spaceflig...
high 7.5 —— 2026-10-142026-10-15
CVE-2026-86562
A flaw was found in DPDK lib/vhost.
high 7.8 —— 2026-10-142026-11-05
CVE-2026-86563
A flaw was found in DPDK lib/vhost.
high 7.8 —— 2026-10-142026-11-05
CVE-2026-86565
A flaw was found in DPDK lib/vhost.
high 8.2 —— 2026-10-142026-11-05
CVE-2026-33795
A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks...
high 7.5 —— 2026-10-142026-10-15
CVE-2026-33798
A Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper Networks Ju...
high 8.8 —— 2026-10-142026-10-15
CVE-2026-15102
ADP Desktop SDK contains a vulnerability where sensitive information is transmit...
high 7.5 —— 2026-10-142026-10-16
CVE-2026-19673
ethernet_recv() in subsys/net/l2/ethernet/ethernet.c validates only that the fir...
high 7.1 —— 2026-10-142026-10-16
CVE-2026-103946
An SQL injection vulnerability could allow an authenticated user to read or modi...
high 8.3 —— 2026-10-142026-10-17
CVE-2026-103994
A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon (vgd) of...
high 8.8 —— 2026-10-142026-10-15
CVE-2026-102183
An Improper Validation of Specified Quantity in Input vulnerability in the routi...
high 7.5 —— 2026-10-142026-10-15
CVE-2026-102184
An Improper Validation of Specified Quantity in Input vulnerability in the routi...
high 7.5 —— 2026-10-142026-10-15
CVE-2026-102185
A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the ro...
high 7.5 —— 2026-10-142026-10-15
CVE-2026-102176
A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnera...
high 8.8 —— 2026-10-142026-10-16
CVE-2026-102177
An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Jun...
high 7.6 —— 2026-10-142026-10-15
CVE-2026-102179
An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Jun...
high 7.5 —— 2026-10-142026-10-15
CVE-2026-102180
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd)...
high 7.5 —— 2026-10-142026-10-15
CVE-2026-102084
An Improper Validation of Syntactic Correctness of Input vulnerability in the VP...
high 8.1 —— 2026-10-142026-10-15
CVE-2026-102174
A Stack-based Buffer Overflow vulnerability in the iked IKE key-management daemo...
high 8.8 —— 2026-10-142026-10-16
CVE-2026-102079
An OS command injection vulnerability in the CLI of Juniper Networks Junos OS al...
high 7.8 —— 2026-10-142026-10-15
CVE-2026-102081
A Missing Release of Memory after Effective Lifetime vulnerability in the packet...
high 7.5 —— 2026-10-142026-10-15
CVE-2026-102064
A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juni...
high 7.5 —— 2026-10-142026-10-16
CVE-2026-102065
An Improper Validation of Specified Quantity in Input vulnerability in the routi...
high 7.5 —— 2026-10-142026-10-15
CVE-2026-102068
A Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Ju...
high 7.5 —— 2026-10-142026-10-15
CVE-2026-102069
A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Netwo...
high 8.8 —— 2026-10-142026-10-15
CVE-2026-102070
A Reachable Assertion vulnerability in the Two-Way Active Measurement Protocol (...
high 7.5 —— 2026-10-142026-10-15
CVE-2026-102059
An Improper Neutralization of Special Elements used in an OS Command ('OS Comman...
high 8.8 —— 2026-10-142026-10-16
CVE-2026-102061
A Stack-based Buffer Overflow vulnerability in the phone-home daemon (phcd) of J...
high 8.8 —— 2026-10-142026-10-16
CVE-2026-102062
An Use of Externally-Controlled Format String vulnerability in the ipfd daemon o...
high 8.1 —— 2026-10-142026-10-15
CVE-2026-102052
A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Net...
high 8.8 —— 2026-10-142026-10-16
CVE-2026-102055
A Stack-based Buffer Overflow vulnerability in the cfmd process of Juniper Netwo...
high 8.8 —— 2026-10-142026-10-16
CVE-2026-102056
An Out-of-bounds Read vulnerability in the cfmd process of Juniper Networks Juno...
high 7.1 —— 2026-10-142026-10-16
CVE-2026-102057
A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Net...
high 7.5 —— 2026-10-142026-10-15
CVE-2026-102046
A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in netsct...
high 7.5 —— 2026-10-142026-10-15
CVE-2026-102049
A Stack-based Buffer Overflow vulnerability in the l2cpd process of Juniper Netw...
high 8.8 —— 2026-10-142026-10-16
CVE-2026-102050
A Stack-based Buffer Overflow vulnerability in the l2cpd daemon of Juniper Netwo...
high 8.8 —— 2026-10-142026-10-16
CVE-2026-102044
A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos...
high 7.5 —— 2026-10-142026-10-15
CVE-2026-102036
An Integer Overflow or Wraparound vulnerability in the l2ald process of Juniper...
high 7.5 —— 2026-10-142026-10-15
CVE-2026-102037
An XML Injection vulnerability in the Unified Threat Management daemon (utmd) of...
high 8.1 —— 2026-10-142026-10-16

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.