September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,364
Critical
1,230
High
4,374
Medium
4,126
Low
462
Severity not reported
1,172
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (964), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-89276 Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of... |
critical | 9.9 | — | Adobe / campaign | 2026-09-22 | 2026-09-26 |
| CVE-2026-82013 Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF)... |
critical | 9.9 | — | Adobe / campaign | 2026-09-22 | 2026-09-26 |
| CVE-2026-75699 Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of... |
critical | 10.0 | — | Adobe / campaign | 2026-09-22 | 2026-09-26 |
| CVE-2026-75684 Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability t... |
critical | 9.3 | — | Adobe / connect | 2026-09-22 | 2026-09-26 |
| CVE-2026-75689 Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability t... |
critical | 9.3 | — | Adobe / connect | 2026-09-22 | 2026-09-26 |
| CVE-2026-83660 Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF)... |
critical | 10.0 | — | Adobe / campaign | 2026-09-22 | 2026-09-26 |
| CVE-2026-82009 Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia... |
critical | 9.1 | — | Adobe / campaign | 2026-09-22 | 2026-09-26 |
| CVE-2026-75721 Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of... |
critical | 10.0 | — | Adobe / campaign | 2026-09-22 | 2026-09-26 |
| CVE-2026-75682 Adobe Connect is affected by an Improper Neutralization of Special Elements used... |
critical | 9.9 | — | Adobe / connect | 2026-09-22 | 2026-09-25 |
| CVE-2026-75686 Adobe Connect is affected by an Improper Input Validation vulnerability that cou... |
critical | 9.3 | — | Adobe / connect | 2026-09-22 | 2026-09-25 |
| CVE-2026-75697 Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability t... |
critical | 9.3 | — | Adobe / connect | 2026-09-22 | 2026-09-25 |
| CVE-2026-75698 Adobe Connect is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit... |
critical | 9.3 | — | Adobe / connect | 2026-09-22 | 2026-09-25 |
| CVE-2026-73369 Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of... |
critical | 10.0 | — | Adobe / campaign | 2026-09-22 | 2026-09-24 |
| CVE-2026-75728 Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerabi... |
critical | 9.1 | — | Adobe / campaign | 2026-09-22 | 2026-09-24 |
| CVE-2026-82011 Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia... |
critical | 9.1 | — | Adobe / campaign | 2026-09-22 | 2026-09-24 |
| CVE-2026-89275 Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of... |
critical | 10.0 | — | Adobe / campaign | 2026-09-22 | 2026-09-23 |
| CVE-2026-84412 Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of... |
critical | 10.0 | — | Adobe / campaign | 2026-09-22 | 2026-09-23 |
| CVE-2026-82443 Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF)... |
critical | 9.9 | — | Adobe / campaign | 2026-09-22 | 2026-09-23 |
| CVE-2026-82008 Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnera... |
critical | 9.9 | — | Adobe / campaign | 2026-09-22 | 2026-09-23 |
| CVE-2026-75723 Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerabi... |
critical | 10.0 | — | Adobe / campaign | 2026-09-22 | 2026-09-23 |
| CVE-2026-75703 Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of... |
critical | 10.0 | — | Adobe / campaign | 2026-09-22 | 2026-09-23 |
| CVE-2026-82010 Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia... |
critical | 9.9 | — | Adobe / campaign | 2026-09-22 | 2026-09-23 |
| CVE-2026-75746 ColdFusion is affected by an Improper Neutralization of Special Elements used in... |
critical | 9.1 | — | Adobe / coldfusion | 2026-09-08 | 2026-09-18 |
| CVE-2019-7105 Adobe XD versions 16.0 and earlier have a path traversal vulnerability. |
critical | 9.8 | — | Adobe / xd | 2019-05-23 | 2026-09-15 |
| CVE-2019-7106 Adobe XD versions 16.0 and earlier have a path traversal vulnerability. |
critical | 9.8 | — | Adobe / xd | 2019-05-23 | 2026-09-15 |
| CVE-2026-48273 ColdFusion is affected by an Improper Neutralization of Directives in Dynamicall... |
critical | 9.9 | — | Adobe / coldfusion | 2026-09-08 | 2026-09-14 |
| CVE-2026-82004 Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia... |
critical | 10.0 | — | Adobe / campaign | 2026-09-08 | 2026-09-11 |
| CVE-2026-19232 Adobe Experience Manager is affected by an Incorrect Authorization vulnerability... |
critical | 9.9 | — | Adobe / experience manager | 2026-09-08 | 2026-09-11 |
| CVE-2026-76201 Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability... |
critical | 9.3 | — | Adobe / commerce | 2026-09-08 | 2026-09-09 |
| CVE-2026-76200 Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability... |
critical | 9.3 | — | Adobe / magento | 2026-09-08 | 2026-09-09 |
| CVE-2026-83964 Adobe Connect is affected by an Improper Certificate Validation vulnerability th... |
high | 7.5 | — | Adobe / connect | 2026-09-22 | 2026-09-26 |
| CVE-2026-82003 Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnera... |
high | 8.5 | — | Adobe / campaign | 2026-09-22 | 2026-09-26 |
| CVE-2026-75655 Bridge is affected by an Uncontrolled Recursion vulnerability that could result... |
high | 7.8 | — | Adobe / bridge | 2026-09-22 | 2026-09-25 |
| CVE-2026-75658 Bridge is affected by an out-of-bounds write vulnerability that could result in... |
high | 7.8 | — | Adobe / bridge | 2026-09-22 | 2026-09-25 |
| CVE-2026-75663 Bridge is affected by an out-of-bounds write vulnerability that could result in... |
high | 7.8 | — | Adobe / bridge | 2026-09-22 | 2026-09-25 |
| CVE-2026-75665 Bridge is affected by a Heap-based Buffer Overflow vulnerability that could resu... |
high | 7.8 | — | Adobe / bridge | 2026-09-22 | 2026-09-25 |
| CVE-2026-75676 Bridge is affected by a Stack-based Buffer Overflow vulnerability that could res... |
high | 7.8 | — | Adobe / bridge | 2026-09-22 | 2026-09-25 |
| CVE-2026-34689 Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricte... |
high | 8.6 | — | Adobe / connect | 2026-09-22 | 2026-09-25 |
| CVE-2026-83963 Substance3D - Modeler is affected by an out-of-bounds write vulnerability that c... |
high | 7.8 | — | Adobe / substance 3d modeler | 2026-09-22 | 2026-09-25 |
| CVE-2026-81998 Substance3D - Modeler is affected by an out-of-bounds write vulnerability that c... |
high | 7.8 | — | Adobe / substance 3d modeler | 2026-09-22 | 2026-09-25 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.