September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,290
Critical
1,223
High
4,344
Medium
4,103
Low
460
Severity not reported
1,160
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-76059 IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom compon... |
high | 8.8 | — | Langflow / langflow | 2026-09-10 | 2026-09-16 |
| CVE-2026-80436 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.5 | — | Ibm / datastage on cloud pak for data | 2026-09-10 | 2026-09-16 |
| CVE-2026-80380 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote attacker to per... |
high | 7.1 | — | Ibm / datastage on cloud pak for data | 2026-09-10 | 2026-09-16 |
| CVE-2026-81210 IBM DataStage on Cloud Pak for Data 5.4.0.0 concatenates three caller-supplied s... |
high | 7.7 | — | Ibm / datastage on cloud pak for data | 2026-09-10 | 2026-09-16 |
| CVE-2026-81207 IBM DataStage on Cloud Pak for Data 5.4.0.0 allows any authenticated tenant — wi... |
high | 8.5 | — | Ibm / datastage on cloud pak for data | 2026-09-10 | 2026-09-16 |
| CVE-2026-81540 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.5 | — | Ibm / datastage on cloud pak for data | 2026-09-10 | 2026-09-16 |
| CVE-2026-81550 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-10 | 2026-09-16 |
| CVE-2026-81551 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.1 | — | Ibm / datastage on cloud pak for data | 2026-09-10 | 2026-09-16 |
| CVE-2026-82095 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-10 | 2026-09-16 |
| CVE-2026-82097 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-10 | 2026-09-16 |
| CVE-2026-82098 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-10 | 2026-09-16 |
| CVE-2026-82099 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-10 | 2026-09-16 |
| CVE-2026-76169 fastify versions >= 4.0.0 and before 5.12.2 can route a malformed URL sent under... |
high | 7.5 | — | Fastify / fastify | 2026-09-04 | 2026-09-15 |
| CVE-2026-84469 fastify versions before 5.12.2 decide whether to compile a request schema based... |
high | 7.5 | — | Fastify / fastify | 2026-09-04 | 2026-09-15 |
| CVE-2026-84504 fastify versions before 5.12.2 treat the object resolved by a successful Ajv asy... |
high | 8.1 | — | Fastify / fastify | 2026-09-04 | 2026-09-15 |
| CVE-2026-65364 An out-of-bounds read was addressed with improved bounds checking. |
high | 7.5 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-68787 Heap-based buffer overflow in SQL Server allows an authorized attacker to execut... |
high | 7.8 | — | Microsoft / sql server 2017 | 2026-09-08 | 2026-09-15 |
| CVE-2026-68786 Heap-based buffer overflow in SQL Server allows an authorized attacker to execut... |
high | 8.8 | — | Microsoft / sql server 2017 | 2026-09-08 | 2026-09-15 |
| CVE-2026-84428 fastify versions before 5.12.2 implement the case-insensitive nature of HTTP hea... |
high | 7.5 | — | Fastify / fastify | 2026-09-04 | 2026-09-15 |
| CVE-2026-68775 Heap-based buffer overflow in SQL Server allows an authorized attacker to execut... |
high | 8.8 | — | Microsoft / sql server 2017 | 2026-09-08 | 2026-09-15 |
| CVE-2026-86138 In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow an... |
high | 7.8 | — | Xmlsoft / libxml2 | 2026-09-05 | 2026-09-15 |
| CVE-2026-86139 In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow. |
high | 7.8 | — | Xmlsoft / libxml2 | 2026-09-05 | 2026-09-15 |
| CVE-2026-86140 In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-base... |
high | 7.8 | — | Xmlsoft / libxml2 | 2026-09-05 | 2026-09-15 |
| CVE-2026-86142 In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXP... |
high | 7.8 | — | Xmlsoft / libxml2 | 2026-09-05 | 2026-09-15 |
| CVE-2026-67642 Heap-based buffer overflow in SQL Server allows an authorized attacker to execut... |
high | 8.8 | — | Microsoft / sql server 2025 | 2026-09-08 | 2026-09-15 |
| CVE-2026-43786 This issue was addressed with additional entitlement checks. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-86143 In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback an... |
high | 7.3 | — | Xmlsoft / libxml2 | 2026-09-05 | 2026-09-15 |
| CVE-2026-64701 A permissions issue was addressed with additional restrictions. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-64712 This issue was addressed with improved checks. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-64736 An out-of-bounds access issue was addressed with improved bounds checking. |
high | 7.1 | — | Apple / ipados | 2026-09-14 | 2026-09-15 |
| CVE-2026-65362 This issue was addressed with improved checks. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-43691 A path handling issue was addressed with improved validation. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-28960 A denial-of-service issue was addressed with improved validation. |
high | 7.5 | — | Apple / ipados | 2026-09-14 | 2026-09-15 |
| CVE-2026-43783 A race condition was addressed with improved locking. |
high | 7.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-43689 A permissions issue was addressed with additional restrictions. |
high | 7.8 | — | Apple / ipados | 2026-09-14 | 2026-09-15 |
| CVE-2026-43692 A validation issue was addressed with improved input sanitization. |
high | 8.8 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
| CVE-2026-86144 In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessT... |
high | 7.8 | — | Xmlsoft / libxml2 | 2026-09-05 | 2026-09-15 |
| CVE-2026-67639 Heap-based buffer overflow in SQL Server allows an authorized attacker to execut... |
high | 8.8 | — | Microsoft / sql server 2017 | 2026-09-08 | 2026-09-15 |
| CVE-2026-90852 A vulnerability has been found in luben zstd-jni up to 1.5.7-13. |
high | 7.3 | — | — | 2026-09-15 | 2026-09-15 |
| CVE-2026-90601 A vulnerability was found in getzep graphiti up to 0.30.2. |
high | 7.3 | — | — | 2026-09-13 | 2026-09-15 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.