CVEs published in October 2026

CVE-2026-79704Unrated

Apache bRPC: Out-of-bounds Read in Multi-stream RPC Response Handling

CVE-2026-78334Unrated

Apache bRPC: Missing Authentication for Streaming RPC Frames

CVE-2026-74755Unrated

Apache bRPC: Integer Underflow in mcpack2pb Parser Leading to Denial of Service

CVE-2026-66392Unrated

Apache bRPC: TLS Client Accepts Certificates for Mismatched Peer Names

CVE-2026-61916Unrated

Apache bRPC: Out-of-bounds Read in URL and Header Lookup Tables on Unsigned-char Platforms

CVE-2026-61902Unrated

Apache bRPC: Memory Exhaustion Through Inconsistent Message Body Limits

CVE-2026-58064Unrated

Apache bRPC: Denial of Service via Unbounded Redis Inline Command Allocation

CVE-2026-56388Unrated

Apache bRPC: Out-of-Bounds Write in Redis Command Parser

CVE-2026-56387Unrated

Apache bRPC: Remote Memory Exhaustion in RTMP AMF Parser

CVE-2026-56386High

Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser in Apache bRPC allows an unauthenticated remote attacker to cause denial of service by sending a malformed DATA frame with the PADDED flag set and a zero-length payload

CVE-2026-54427Unrated

Apache bRPC: Stack Exhaustion via Unbounded Recursion in AMF Parser

CVE-2026-54426Unrated

Apache bRPC: Stack Exhaustion via Unbounded Recursion in Redis Reply Parser

CVE-2026-54425Unrated

Apache bRPC: Stack Exhaustion via Recursive HPACK Dynamic Table Size Update Decoding

CVE-2026-48830Unrated

Apache bRPC: HTTP builtin request can mark a connection authenticated and bypass auth for later requests

CVE-2026-59229Unrated

Apache IoTDB: Legacy Pipe Privilege Escalation

CVE-2026-59562Unrated

Missing authentication for critical function vulnerability in Apache IoTDB

CVE-2026-41114Unrated

Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver

CVE-2026-58663Unrated

authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from 2.0.0 before 2.0.11

CVE-2026-115560Medium

CVE-2026-76505High

Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability

CVE-2026-76497High

CVE-2026-76496High

CVE-2026-76495High

CVE-2026-76494High

CVE-2026-76493High

CVE-2026-76492High

CVE-2026-76491High

CVE-2026-76490High

CVE-2026-76487Medium

Cisco Unified Communications Manager Improper Access Control Vulnerability

CVE-2026-76481Critical

CVE-2026-76479Critical

CVE-2026-76478Critical

CVE-2026-76477Critical

CVE-2026-76476Critical

CVE-2026-76475Critical

CVE-2026-76474Critical

CVE-2026-76473Critical

CVE-2026-76466Critical

Cisco Expressway Series Remote Code Execution Vulnerability

CVE-2026-76462Medium

Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability

CVE-2026-76435Medium

Cisco Expressway Series Information Disclosure Vulnerability

CVE-2026-113779High

The pfSense REST API package is an unofficial, open-source REST and GraphQL API for pfSense CE and pfSense Plus firewalls

CVE-2026-78066Unrated

Apache bRPC: Resource Exhaustion via Unbounded Decompression and Unvalidated Wire-Declared Sizes

CVE-2026-78058Unrated

Apache bRPC: Unbounded Resource Consumption and Crash in the HTTP/2 Receive Path

CVE-2026-78048Unrated

Apache bRPC: Remote Denial of Service via Out-of-Bounds Dynamic Table Sizing in HPACK Decoder

CVE-2026-74758Unrated

Apache bRPC: Heap Use-After-Free in RTMP Abort Message Handling

CVE-2026-74757High

Uncontrolled resource allocation in the mcpack2pb component in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to make the server allocate a large amount of memory via sending a crafted mcpack request with a huge array item count

CVE-2026-97313High

Denial of service via assertion failure in RPZ query processing

CVE-2026-65898Critical

CVE-2026-6476High

CVE-2026-48798High

SSH.NET Vulnerability in NetApp Products

CVE-2026-48525High

CVE-2026-48523High

CVE-2026-48522High

CVE-2026-42311High

CVE-2026-42308High

CVE-2026-32778Low

Libexpat Vulnerability in NetApp Products

CVE-2026-32777Medium

Libexpat Vulnerability in NetApp Products

CVE-2026-32776Medium

Libexpat Vulnerability in NetApp Products

CVE-2026-25541Critical

CVE-2026-109619CriticalCISA KEV

PHP Stale Internal Request-State Vulnerability

CVE-2026-109618CriticalCISA KEV

PHP Memory Corruption Vulnerability

CVE-2026-106069Critical

TLS certificate hostname bypass via non-canonical IP hostnames

CVE-2026-105483Critical

TLS certificate hostname bypass via fullwidth-digit IP hostnames

CVE-2026-105482Critical

dns.resolve truncates hostnames containing a NUL character

CVE-2025-69277High

CVE-2025-60876Medium

BusyBox Vulnerability in NetApp Products

CVE-2025-49128Medium

Jackson-Core Vulnerability in NetApp Products

CVE-2025-12084Medium

Python Vulnerability in NetApp Products

CVE-2024-8184Medium

Jetty Vulnerability in NetApp Products

CVE-2024-34062High

CVE-2024-13009High

Jetty Vulnerability in NetApp Products

CVE-2026-91487Medium

Enhance C2 comparisons (Oracle CPU 2026-10)

CVE-2026-91464High

Enhance Kerberos validation (Oracle CPU 2026-10)

CVE-2026-91463High

Enhance krb5 client (Oracle CPU 2026-10)

CVE-2026-91462High

Enhance krb5 tokens (Oracle CPU 2026-10)

CVE-2026-91461High

Enhance TLS Extensions (Oracle CPU 2026-10)

CVE-2026-91453High

Improve HTTP headers (Oracle CPU 2026-10)

CVE-2026-91452High

Enhance HTTP server (Oracle CPU 2026-10)

CVE-2026-91451Medium

Enhance HTTP server parsing (Oracle CPU 2026-10)

CVE-2026-91418High

Enhance GIF loading (Oracle CPU 2026-10)

CVE-2026-91417High

Enhance CORBA (Oracle CPU 2026-10)

CVE-2026-91415High

Enhance font rendering (Oracle CPU 2026-10)

CVE-2026-91411Medium

Enhance JGSS (Oracle CPU 2026-10)

CVE-2026-91410Medium

Enhance zipfs (Oracle CPU 2026-10)

CVE-2026-91409Low

Enhance QUIC connections (Oracle CPU 2026-10)

CVE-2026-91402High

information disclosure via untrusted code execution

CVE-2026-91400High

Enhance MIDI file handling (Oracle CPU 2026-10)

CVE-2026-91398High

Enhance SOCKS5 support (Oracle CPU 2026-10)

CVE-2026-91397High

Enhance diagnostic sessions (Oracle CPU 2026-10)

CVE-2026-91396Medium

Improve Pack200 handling (Oracle CPU 2026-10)

CVE-2026-91395Medium

Enhance Pack200 unpacking (Oracle CPU 2026-10)

CVE-2026-91394Medium

Enhance HTTP client caching (Oracle CPU 2026-10)

CVE-2026-91382Medium

Enhance Image Processing (Oracle CPU 2026-10)

CVE-2026-91381High

Enhance Font Rendering (Oracle CPU 2026-10)

CVE-2026-91380High

Enhance Preferences (Oracle CPU 2026-10)

CVE-2026-91379Medium

Enhance JShell (Oracle CPU 2026-10)

CVE-2026-91375Medium

Enhance jmod handling (Oracle CPU 2026-10)

CVE-2026-91374High

Enhance jstatd (Oracle CPU 2026-10)

CVE-2026-91373Medium

Enhance TLS handshakes (Oracle CPU 2026-10)

CVE-2026-91335High

Enhance Image Handling (Oracle CPU 2026-10)