Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

September 2026 CVE archive

Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in September 2026Materially updated (Critical / KEV)
Total records
15,074
Critical
1,387
High
5,790
Medium
4,833
Low
527
Severity not reported
2,537
In CISA KEV
32

Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-90380
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76:...
high 8.8 —— 2026-09-172026-10-19
CVE-2026-90381
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76:...
high 8.8 —— 2026-09-172026-10-19
CVE-2026-90383
In the Linux kernel, the following vulnerability has been resolved: misc: sgi-g...
high 7.8 —— 2026-09-172026-10-30
CVE-2026-90371
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76:...
high 8.8 —— 2026-09-172026-10-19
CVE-2026-90372
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76:...
high 7.1 —— 2026-09-172026-10-19
CVE-2026-90367
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76:...
high 8.8 —— 2026-09-172026-10-21
CVE-2026-90353
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76:...
high 7.0 —— 2026-09-172026-10-19
CVE-2026-90357
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76:...
high 8.8 —— 2026-09-172026-10-19
CVE-2026-90358
In the Linux kernel, the following vulnerability has been resolved: bpf, x86: F...
high 7.8 —— 2026-09-172026-10-30
CVE-2026-90347
In the Linux kernel, the following vulnerability has been resolved: arm64: ptra...
high 8.4 —— 2026-09-172026-10-30
CVE-2026-90341
In the Linux kernel, the following vulnerability has been resolved: firmware: c...
high 7.7 —— 2026-09-172026-10-19
CVE-2026-90343
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80...
high 7.8 —— 2026-09-172026-10-30
CVE-2026-90329
In the Linux kernel, the following vulnerability has been resolved: HID: synchr...
high 8.8 —— 2026-09-172026-10-19
CVE-2026-90332
In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: e...
high 8.2 —— 2026-09-172026-10-19
CVE-2026-90321
In the Linux kernel, the following vulnerability has been resolved: ocfs2: vali...
high 7.8 —— 2026-09-172026-10-21
CVE-2026-90324
In the Linux kernel, the following vulnerability has been resolved: ublk: check...
high 7.8 —— 2026-09-172026-10-21
CVE-2026-90325
In the Linux kernel, the following vulnerability has been resolved: blk-cgroup:...
high 7.8 —— 2026-09-172026-10-19
CVE-2026-90326
In the Linux kernel, the following vulnerability has been resolved: blk-cgroup:...
high 7.8 —— 2026-09-172026-10-21
CVE-2026-90316
In the Linux kernel, the following vulnerability has been resolved: drm/omap: d...
high 7.8 —— 2026-09-172026-10-19
CVE-2026-90317
In the Linux kernel, the following vulnerability has been resolved: bpf: Invali...
high 7.8 —— 2026-09-172026-10-19
CVE-2026-90320
In the Linux kernel, the following vulnerability has been resolved: ocfs2: vali...
high 7.8 —— 2026-09-172026-10-21
CVE-2026-90308
In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma:...
high 7.8 —— 2026-09-172026-10-30
CVE-2026-90309
In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma:...
high 7.8 —— 2026-09-172026-10-19
CVE-2026-90312
In the Linux kernel, the following vulnerability has been resolved: bpf: Check...
high 7.8 —— 2026-09-172026-10-19
CVE-2026-90301
In the Linux kernel, the following vulnerability has been resolved: ocfs2: o2hb...
high 8.1 —— 2026-09-172026-10-30
CVE-2026-90291
In the Linux kernel, the following vulnerability has been resolved: module/dups...
high 7.8 —— 2026-09-172026-10-21
CVE-2026-90292
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: F...
high 7.8 —— 2026-09-172026-10-19
CVE-2026-90293
In the Linux kernel, the following vulnerability has been resolved: IB/isert: p...
high 7.5 —— 2026-09-172026-10-19
CVE-2026-90294
In the Linux kernel, the following vulnerability has been resolved: IB/isert: d...
high 7.5 —— 2026-09-172026-10-19
CVE-2026-90286
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/...
high 8.8 —— 2026-09-172026-10-19
CVE-2026-90288
In the Linux kernel, the following vulnerability has been resolved: phy: renesa...
high 7.4 —— 2026-09-172026-10-19
CVE-2026-90289
In the Linux kernel, the following vulnerability has been resolved: drm/amd/dis...
high 7.8 —— 2026-09-172026-10-30
CVE-2026-90268
In the Linux kernel, the following vulnerability has been resolved: scsi: sd: F...
high 8.1 —— 2026-09-172026-10-19
CVE-2026-90260
In the Linux kernel, the following vulnerability has been resolved: btrfs: zone...
high 7.1 —— 2026-09-172026-10-21
CVE-2026-90255
In the Linux kernel, the following vulnerability has been resolved: Bluetooth:...
high 8.8 —— 2026-09-172026-10-19
CVE-2026-90256
In the Linux kernel, the following vulnerability has been resolved: Bluetooth:...
high 8.8 —— 2026-09-172026-10-21
CVE-2026-90241
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d:...
high 8.2 —— 2026-09-172026-10-19
CVE-2026-90243
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d:...
high 8.1 —— 2026-09-172026-10-19
CVE-2026-90244
In the Linux kernel, the following vulnerability has been resolved: iommu/dma:...
high 7.8 —— 2026-09-172026-10-19
CVE-2026-90246
In the Linux kernel, the following vulnerability has been resolved: apparmor: f...
high 7.1 —— 2026-09-172026-10-19

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.