October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 31, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
17,481
Critical
1,390
High
6,087
Medium
6,446
Low
659
Severity not reported
2,899
In CISA KEV
21
Most affected vendors (by CPE data where available): microsoft (1359), google (759), oracle (376), apple (282), ibm (149), adobe (138), apache (73), imagemagick (72), broadcom (61), freerdp (60)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-102028 A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102029 A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102030 An Incomplete Cleanup vulnerability in the rpd process of Juniper Networks Junos... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102022 A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juni... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102023 A Reachable Assertion vulnerability in fwstatsd of Juniper Networks Junos OS Evo... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102024 An Integer Overflow or Wraparound vulnerability in the routing daemon (rpd) of J... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102025 A Mismatched Memory Management Routines vulnerability in the routing protocol da... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102026 An Improper Control of a Resource Through its Lifetime vulnerability in the rout... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102027 An Incorrect Calculation of Buffer Size vulnerability in the routing protocol da... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102016 An Improper Validation of Specified Quantity in Input vulnerability in the rpd p... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102020 A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102012 A Reachable Assertion vulnerability in the na-grpcd process of Juniper Networks... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102014 A Stack-based Buffer Overflow vulnerability in the authd process of Juniper Netw... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-102015 A Heap-based Buffer Overflow vulnerability in the secure-dot1xd process of Junip... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-101994 An Improper Handling of Length Parameter Inconsistency vulnerability in the
l2... |
high | 7.1 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-101997 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Inje... |
high | 8.1 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-101977 A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101978 An OS Command Injection vulnerability in the bootzd zero-touch provisioning daem... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-101967 An OS Command Injection vulnerability in the bootzd zero-touch provisioning daem... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101973 A NULL Pointer Dereference vulnerability in the pkid component of Juniper Networ... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101951 An Improper Validation of Consistency within Input vulnerability in the routing... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101955 A Stack-based Buffer Overflow vulnerability in the UTM Anti-Spam SBL of Juniper... |
high | 8.1 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-101957 An Improper Initialization vulnerability in the routing protocol daemon (rpd) of... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101965 An Use of Externally-Controlled Format String vulnerability in the gRPC daemon o... |
high | 8.8 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101966 A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd o... |
high | 8.2 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101943 An Improper Input Validation vulnerability in the routing protocol daemon (rpd)... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-18 |
| CVE-2026-101944 An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-101945 An Integer Overflow or Wraparound vulnerability in the rpd process of Juniper Ne... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-101948 A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-15 |
| CVE-2026-101939 A NULL Pointer Dereference vulnerability in the routing protocol daemon (RPD) of... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-101940 A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Ne... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-18 |
| CVE-2026-101941 A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-18 |
| CVE-2026-101942 An Improper Handling of Length Parameter Inconsistency vulnerability in the rout... |
high | 7.5 | — | — | 2026-10-14 | 2026-10-18 |
| CVE-2026-101927 A Heap-based Buffer Overflow vulnerability in eventd of Juniper Networks Junos O... |
high | 7.8 | — | — | 2026-10-14 | 2026-10-16 |
| CVE-2026-100236 A flaw was found in the DPDK GSO library. |
high | 8.6 | — | — | 2026-10-14 | 2026-11-04 |
| CVE-2016-15060 A vulnerability was found in PCMan FTP Server up to 2.0.7. |
high | 8.3 | — | — | 2026-10-14 | 2026-10-20 |
| CVE-2026-89077 Incorrect implementation of authentication algorithm vulnerability in Progress M... |
high | 8.8 | — | Progress / moveit transfer | 2026-10-14 | 2026-10-19 |
| CVE-2026-91156 Discourse is an open-source discussion platform. |
high | 7.5 | — | — | 2026-10-14 | 2026-10-14 |
| CVE-2026-91157 Discourse is an open-source discussion platform. |
high | 7.5 | — | — | 2026-10-14 | 2026-10-20 |
| CVE-2026-91159 Discourse is an open-source discussion platform. |
high | 7.7 | — | — | 2026-10-14 | 2026-10-20 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.