September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,833
Low
527
Severity not reported
2,537
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-98003 In the Linux kernel, the following vulnerability has been resolved:
iommu/amd:... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-98004 In the Linux kernel, the following vulnerability has been resolved:
iommu/riscv... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98005 In the Linux kernel, the following vulnerability has been resolved:
erofs: deli... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98006 In the Linux kernel, the following vulnerability has been resolved:
ALSA: caiaq... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98007 In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97989 In the Linux kernel, the following vulnerability has been resolved:
vduse: vali... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97992 In the Linux kernel, the following vulnerability has been resolved:
vhost-vdpa:... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97993 In the Linux kernel, the following vulnerability has been resolved:
vhost-vdpa:... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97994 In the Linux kernel, the following vulnerability has been resolved:
vhost/vdpa:... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97995 In the Linux kernel, the following vulnerability has been resolved:
virtio_cons... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97996 In the Linux kernel, the following vulnerability has been resolved:
virtio: fix... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97997 In the Linux kernel, the following vulnerability has been resolved:
virtio_ring... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97980 In the Linux kernel, the following vulnerability has been resolved:
s390/debug:... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97981 In the Linux kernel, the following vulnerability has been resolved:
net: ethern... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97982 In the Linux kernel, the following vulnerability has been resolved:
net: ethern... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97983 In the Linux kernel, the following vulnerability has been resolved:
vduse: retu... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97984 In the Linux kernel, the following vulnerability has been resolved:
net: ipv6:... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97985 In the Linux kernel, the following vulnerability has been resolved:
af_unix: Up... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97986 In the Linux kernel, the following vulnerability has been resolved:
virtio_inpu... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97987 In the Linux kernel, the following vulnerability has been resolved:
virtio_inpu... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97988 In the Linux kernel, the following vulnerability has been resolved:
vhost: inva... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97972 In the Linux kernel, the following vulnerability has been resolved:
net: macb:... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97973 In the Linux kernel, the following vulnerability has been resolved:
net: macb:... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97974 In the Linux kernel, the following vulnerability has been resolved:
ipv6: null-... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97975 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97976 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97977 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97978 In the Linux kernel, the following vulnerability has been resolved:
eth: ice: d... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97979 In the Linux kernel, the following vulnerability has been resolved:
ice: add mi... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97963 In the Linux kernel, the following vulnerability has been resolved:
net: stmmac... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97964 In the Linux kernel, the following vulnerability has been resolved:
ppp_synctty... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97965 In the Linux kernel, the following vulnerability has been resolved:
vxlan: init... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97966 In the Linux kernel, the following vulnerability has been resolved:
octeontx2-p... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97967 In the Linux kernel, the following vulnerability has been resolved:
hwmon: (cor... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97968 In the Linux kernel, the following vulnerability has been resolved:
hwmon: (cor... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97969 In the Linux kernel, the following vulnerability has been resolved:
watchdog: m... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97970 In the Linux kernel, the following vulnerability has been resolved:
watchdog: m... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97954 In the Linux kernel, the following vulnerability has been resolved:
net/rds: fi... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97955 In the Linux kernel, the following vulnerability has been resolved:
net: mana:... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97956 In the Linux kernel, the following vulnerability has been resolved:
net: net_fa... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.