September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,290
Critical
1,223
High
4,344
Medium
4,103
Low
460
Severity not reported
1,160
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-83253 Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience... |
high | 7.8 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83254 Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience... |
high | 8.1 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83255 Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience... |
high | 8.1 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83256 Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience... |
high | 8.1 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83194 Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (com... |
high | 8.8 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83195 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
high | 7.2 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83211 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
high | 7.8 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83212 Vulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (co... |
high | 8.8 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83214 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
high | 7.8 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83216 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
high | 7.8 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83239 Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience... |
high | 7.0 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83170 Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business... |
high | 8.0 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83176 Vulnerability in the Oracle Common Applications product of Oracle E-Business Sui... |
high | 7.2 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83189 Vulnerability in the Oracle User Management product of Oracle E-Business Suite (... |
high | 8.8 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83190 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
high | 7.3 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83191 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
high | 8.1 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83192 Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component... |
high | 8.1 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83193 Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (c... |
high | 7.3 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83119 Vulnerability in the Oracle User Management product of Oracle E-Business Suite (... |
high | 8.8 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83120 Vulnerability in the Oracle Alert product of Oracle E-Business Suite (component:... |
high | 8.8 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83121 Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (compon... |
high | 8.8 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83147 Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracl... |
high | 7.8 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83148 Vulnerability in Oracle Application Testing Suite. |
high | 8.8 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83150 Vulnerability in Oracle Application Testing Suite. |
high | 7.0 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83168 Vulnerability in the Oracle Applications Manager product of Oracle E-Business Su... |
high | 8.8 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83169 Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business... |
high | 8.1 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83112 Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Bus... |
high | 7.2 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83114 Vulnerability in the Oracle Quality product of Oracle E-Business Suite (componen... |
high | 7.5 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83117 Vulnerability in the Applications DBA product of Oracle E-Business Suite (compon... |
high | 7.2 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-91721 Use after free in Internals in Google Chrome prior to 153.0.8010.47 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-09-15 | 2026-09-17 |
| CVE-2026-91715 Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-09-15 | 2026-09-17 |
| CVE-2026-91712 Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 a... |
high | 8.3 | — | Google / chrome | 2026-09-15 | 2026-09-17 |
| CVE-2026-91711 Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 all... |
high | 8.8 | — | Google / chrome | 2026-09-15 | 2026-09-17 |
| CVE-2026-91709 Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed... |
high | 8.8 | — | Google / chrome | 2026-09-15 | 2026-09-17 |
| CVE-2026-85569 The Tutor LMS WordPress plugin before 4.0.8 does not correctly determine whether... |
high | 7.2 | — | — | 2026-09-16 | 2026-09-17 |
| CVE-2026-86444 The LearnPress WordPress plugin before 4.4.7 does not escape a user supplied val... |
high | 7.1 | — | — | 2026-09-16 | 2026-09-17 |
| CVE-2026-85530 The GiveWP WordPress plugin before 4.16.8.1 does not consistently normalise a do... |
high | 8.1 | — | — | 2026-09-16 | 2026-09-17 |
| CVE-2026-83118 Vulnerability in the Applications DBA product of Oracle E-Business Suite (compon... |
high | 7.8 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83342 Vulnerability in the Oracle Utilities Network Management System product of Oracl... |
high | 7.8 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83353 Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middlewar... |
high | 7.8 | — | — | 2026-09-15 | 2026-09-17 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.