September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,833
Low
527
Severity not reported
2,537
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-85697 Documenso 2.17.0 contains an access control vulnerability in the PDF-serving end... |
medium | 6.5 | — | — | 2026-09-04 | 2026-09-24 |
| CVE-2026-85698 Turso through 0.8.0-pre.8 contains an out-of-bounds read vulnerability in the ta... |
medium | 5.5 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85692 Nightingale (n9e), as of commit 8362cbe (main branch, confirmed 2026-08-27), con... |
medium | 6.5 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85693 Chatbot UI contains an authorization bypass vulnerability in the retrieval endpo... |
medium | 6.5 | — | — | 2026-09-04 | 2026-09-24 |
| CVE-2026-85689 llmware 0.4.6 contains an SQL injection vulnerability in the collection-database... |
medium | 6.5 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85676 Dub contains an open redirect vulnerability in the redir_url query parameter tha... |
medium | 4.3 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85665 Bruno versions through 4.1.0 fail to validate file paths in request body declara... |
medium | 6.5 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85669 potpie through 2.0.0 fails to verify user ownership on the POST /conversations/{... |
medium | 6.5 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85670 tokenizers (Hugging Face) is affected by an out-of-bounds buffer access in BpeBu... |
medium | 6.5 | — | — | 2026-09-04 | 2026-09-24 |
| CVE-2026-85650 Trigger.dev before 4.5.2 contains a server-side request forgery vulnerability in... |
medium | 5.4 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85662 Marqo 2.26.0 contains a server-side request forgery vulnerability in the add_doc... |
medium | 5.3 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85621 LobeChat (LobeHub) 2.2.1 does not properly verify inbound chat-platform webhook... |
medium | 6.5 | — | — | 2026-09-04 | 2026-09-24 |
| CVE-2026-85622 AppFlowy-Cloud through 0.9.64 fails to validate workspace membership when establ... |
medium | 5.3 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85624 Blinko 1.8.7 contains a cross-user private note disclosure vulnerability in the... |
medium | 6.5 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85605 Slink before 1.12.3 fails to properly authorize access to image comment endpoint... |
medium | 5.3 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85618 ConvertX 0.17.0 contains an arbitrary file read vulnerability in the xelatex con... |
medium | 6.5 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-81859 CP4BA - IBM Enterprise Records could allow a local attacker to obtain sensitive... |
medium | 6.2 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-19727 Improper neutralization of input during web page generation ('cross-site scripti... |
medium | 6.1 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-14466 It’s possible to run a stored XSS in Stormshield’s web administration panel. |
medium | 4.3 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-85517 A flaw has been found in code-projects Vehicle Management System 1.0. |
medium | 5.3 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-85522 A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. |
medium | 5.3 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-77818 Improper neutralization of input during web page generation ('cross-site scripti... |
medium | 6.1 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-19081 Missing Authorization vulnerability in Gastromenum Gastromenum Ticket and QR Men... |
medium | 4.3 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-19057 Improper neutralization of input during web page generation ('cross-site scripti... |
medium | 5.4 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-85513 A weakness has been identified in StackStorm st2 up to 3.9.0. |
medium | 6.3 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-85514 A security vulnerability has been detected in StackStorm st2 up to 3.9.0. |
medium | 6.3 | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-82309 Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outb... |
medium | 4.3 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-74235 GFI Exinda AI and ClearView before 7.6.5 contains a path traversal vulnerability... |
medium | 4.9 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-74236 GFI Exinda AI and ClearView before 7.6.5 contains a path traversal vulnerability... |
medium | 6.5 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-74237 GFI Exinda AI and ClearView before 7.6.5 contains an argument injection vulnerab... |
medium | 6.5 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85615 Openpanel before 2.3.0 contains an insecure direct object reference vulnerabilit... |
medium | 6.4 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85603 Grav versions before 1.10.55 contain a path traversal vulnerability in the admin... |
medium | 6.5 | — | — | 2026-09-04 | 2026-09-14 |
| CVE-2026-85611 OpenPanel before 2.3.0 contains a cross-tenant broken object level authorization... |
medium | 6.4 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-85598 Grav versions 2.0.0 through 2.0.17 fail to apply save-time XSS detection to modu... |
medium | 6.4 | — | — | 2026-09-04 | 2026-09-14 |
| CVE-2026-85600 Grav Admin (getgrav/grav-plugin-admin2) versions <= 2.0.19 contain a stored cros... |
medium | 5.4 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-85601 Grav Admin before 2.0.20 fails to sanitize output from marked.parse() before inj... |
medium | 5.4 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85602 The Grav Form plugin (getgrav/grav-plugin-form) versions 8.0.6 through 9.1.19 se... |
medium | 5.3 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-85593 phpMyFAQ versions before 4.1.8 contain a stored cross-site scripting vulnerabili... |
medium | 5.4 | — | — | 2026-09-04 | 2026-09-14 |
| CVE-2026-85582 SiYuan versions before v3.8.2 contain an unbounded session creation vulnerabilit... |
medium | 6.5 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-85583 SiYuan versions before v3.8.2 contain a path traversal vulnerability in the read... |
medium | 6.5 | — | — | 2026-09-04 | 2026-09-14 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.