September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,290
Critical
1,223
High
4,344
Medium
4,103
Low
460
Severity not reported
1,160
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-71809 Authentication Bypass via Hardcoded Master Verification Code vulnerability in Si... |
high | 8.1 | — | — | 2026-09-09 | 2026-09-14 |
| CVE-2026-71612 Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 a... |
high | 8.4 | — | — | 2026-09-09 | 2026-09-14 |
| CVE-2026-58611 Improper authorization in XBox Gaming Services allows an authorized attacker to... |
high | 7.8 | — | Microsoft / xbox gaming services | 2026-09-08 | 2026-09-14 |
| CVE-2026-69293 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-14 |
| CVE-2026-69738 Integer overflow or wraparound in Windows Biometric Service allows an authorized... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-14 |
| CVE-2026-69826 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 8.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-14 |
| CVE-2026-75631 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-09-08 | 2026-09-14 |
| CVE-2026-86819 Waves Central for macOS contains a local privilege escalation in the privileged... |
high | 7.1 | — | — | 2026-09-08 | 2026-09-14 |
| CVE-2026-87815 SiYuan versions before v3.8.2 contain a path traversal vulnerability in the /api... |
high | 8.7 | — | — | 2026-09-09 | 2026-09-14 |
| CVE-2026-86775 knowns (npm package) versions <= 0.29.1 contain a path traversal vulnerability i... |
high | 8.6 | — | — | 2026-09-09 | 2026-09-14 |
| CVE-2026-87825 zstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams a... |
high | 7.7 | — | — | 2026-09-09 | 2026-09-14 |
| CVE-2026-79389 Trueview T18161 S 6.0.23.4 contains an improper verification in MQTT command pro... |
high | 7.4 | — | — | 2026-09-04 | 2026-09-14 |
| CVE-2026-79695 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
high | 7.3 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-14 |
| CVE-2026-75439 An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of servic... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-14 |
| CVE-2026-71620 File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attack... |
high | 8.1 | — | — | 2026-09-04 | 2026-09-14 |
| CVE-2026-62647 A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). |
high | 7.4 | — | — | 2026-09-08 | 2026-09-14 |
| CVE-2026-34223 A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versio... |
high | 8.2 | — | — | 2026-09-08 | 2026-09-14 |
| CVE-2026-22591 eprosima Fast DDS is a C++ implementation of the DDS (Data Distribution Service)... |
high | 7.5 | — | — | 2026-09-09 | 2026-09-14 |
| CVE-2026-83948 Improper neutralization of special elements used in a command ('command injectio... |
high | 8.0 | — | Microsoft / vm repair | 2026-09-08 | 2026-09-14 |
| CVE-2026-87734 An issue was discovered in the utcp package before 0.0.6 for OCaml. |
high | 7.5 | — | — | 2026-09-09 | 2026-09-14 |
| CVE-2026-87795 zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters... |
high | 8.2 | — | — | 2026-09-09 | 2026-09-14 |
| CVE-2026-78491 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
high | 8.2 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-14 |
| CVE-2026-79635 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
high | 7.3 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-14 |
| CVE-2026-71614 An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to... |
high | 8.4 | — | — | 2026-09-09 | 2026-09-14 |
| CVE-2026-52482 An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attack... |
high | 7.5 | — | — | 2026-09-09 | 2026-09-14 |
| CVE-2026-72991 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-14 |
| CVE-2026-86452 Affected versions of MISP permit unauthenticated or weakly constrained request p... |
high | 7.5 | — | Misp-project / misp | 2026-09-07 | 2026-09-14 |
| CVE-2026-83987 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83981 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83982 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83983 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83985 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83971 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83972 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83973 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83977 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83980 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83954 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83967 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
| CVE-2026-83970 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-12 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.