September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,833
Low
527
Severity not reported
2,537
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2025-71417 PocketMine-MP before 5.32.1 fails to validate uniqueness of pack UUIDs in Resour... |
medium | 6.5 | — | — | 2026-09-09 | 2026-10-19 |
| CVE-2025-71418 PocketMine-MP versions before 5.25.2 fail to limit the explode() function in pac... |
medium | 5.3 | — | — | 2026-09-09 | 2026-10-14 |
| CVE-2023-54392 PocketMine-MP versions >= 4.20.0 before 4.22.3 (and before 5.2.1 in the 5.x bran... |
medium | 6.5 | — | — | 2026-09-09 | 2026-10-08 |
| CVE-2023-54394 PocketMine-MP before 4.18.0-ALPHA2 fails to rate-limit mismatch type InventoryTr... |
medium | 4.3 | — | — | 2026-09-09 | 2026-10-08 |
| CVE-2023-54395 PocketMine-MP versions before 4.12.5 contain a denial-of-service vulnerability i... |
medium | 4.3 | — | — | 2026-09-09 | 2026-10-08 |
| CVE-2023-54396 PocketMine-MP versions before 4.8.1 fail to validate dye color IDs in banner NBT... |
medium | 6.5 | — | — | 2026-09-09 | 2026-10-08 |
| CVE-2026-79965 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.3 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-09 |
| CVE-2026-79968 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.9 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-14 |
| CVE-2026-79969 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.9 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-14 |
| CVE-2026-79728 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 6.5 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-14 |
| CVE-2026-79961 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.3 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-09 |
| CVE-2026-79962 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.9 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-09 |
| CVE-2026-79638 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.3 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-09 |
| CVE-2026-79694 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.5 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-09 |
| CVE-2026-87820 CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugg... |
medium | 5.3 | — | — | 2026-09-09 | 2026-09-14 |
| CVE-2026-87812 SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in Baz... |
medium | 6.8 | — | — | 2026-09-09 | 2026-09-10 |
| CVE-2026-87818 GitPython 3.1.59 fails to restrict the --no-index option in the high-level diff... |
medium | 6.5 | — | Gitpython Project / gitpython | 2026-09-09 | 2026-09-16 |
| CVE-2026-87808 SiYuan versions <= 3.8.1 contain an incomplete fix for CVE-2026-32767 (GHSA-j7wh... |
medium | 4.9 | — | — | 2026-09-09 | 2026-09-09 |
| CVE-2026-87809 Siyuan before v3.8.2 fails to apply publish-access filtering to embedded blocks... |
medium | 6.5 | — | — | 2026-09-09 | 2026-09-18 |
| CVE-2026-87810 Siyuan before v3.8.2 contains an information disclosure vulnerability in the POS... |
medium | 5.3 | — | — | 2026-09-09 | 2026-09-14 |
| CVE-2026-79730 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.6 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-14 |
| CVE-2026-79970 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.6 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-16 |
| CVE-2026-80171 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 4.7 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-09 |
| CVE-2026-78481 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 6.5 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-09 |
| CVE-2026-78489 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.9 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-09 |
| CVE-2026-80174 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.3 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-14 |
| CVE-2026-54048 Specifying tblproperties('avro.schema.url'=' http://...' ) or with a 'file:///'... |
medium | 5.3 | — | Apache / impala | 2026-09-09 | 2026-09-10 |
| CVE-2026-86777 AlchemyCMS versions before 7.4.16 and 8.x before 8.3.6 fail to authorize access... |
medium | 5.3 | — | — | 2026-09-09 | 2026-09-10 |
| CVE-2026-86547 mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the op... |
medium | 6.2 | — | — | 2026-09-09 | 2026-09-10 |
| CVE-2026-78377 URL redirection to untrusted site ('open redirect') vulnerability in Yordam Info... |
medium | 6.1 | — | — | 2026-09-09 | 2026-09-09 |
| CVE-2026-19733 Server-Side request forgery (SSRF) vulnerability in Yordam Informatics Technolog... |
medium | 5.3 | — | — | 2026-09-09 | 2026-09-09 |
| CVE-2026-11838 Missing authentication for critical function vulnerability in Yordam Informatics... |
medium | 4.3 | — | — | 2026-09-09 | 2026-09-09 |
| CVE-2026-79640 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.4 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-09 |
| CVE-2026-79967 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.6 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-09 |
| CVE-2026-79973 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 6.3 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-09 |
| CVE-2026-79974 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 6.4 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-11 |
| CVE-2025-46808 An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvec... |
medium | 6.8 | — | — | 2026-09-09 | 2026-10-19 |
| CVE-2026-80055 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 4.4 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-09 |
| CVE-2026-80124 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.5 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-14 |
| CVE-2026-80177 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 6.5 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-09 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.