September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,364
Critical
1,230
High
4,374
Medium
4,126
Low
462
Severity not reported
1,172
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (964), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-93739 A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. |
critical | 9.9 | — | — | 2026-09-18 | 2026-09-23 |
| CVE-2026-96755 orval versions 8.14.0 through 8.28.1 contain a code injection vulnerability in t... |
critical | 9.8 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-75799 The YAHMAN Add-ons WordPress plugin before 0.9.31 does not validate the type of... |
critical | 9.0 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-54627 SAIL is a cross-platform library for loading and saving images with support for... |
critical | 9.8 | — | — | 2026-09-17 | 2026-09-23 |
| CVE-2026-54734 Prebid Server Java is the Java version of Prebid Server. |
critical | 10.0 | — | — | 2026-09-17 | 2026-09-23 |
| CVE-2026-61781 pg_partman is a PostgreSQL extension that manages partitioned tables by time or... |
critical | 9.9 | — | — | 2026-09-18 | 2026-09-23 |
| CVE-2026-57149 plone.app.portlets.portlets provides a Plone-specific user interface for plone.p... |
critical | 9.9 | — | — | 2026-09-22 | 2026-09-23 |
| CVE-2026-82331 Improper link resolution before file access ('link following') vulnerability in... |
critical | 9.8 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-86248 CLIENT_CERT authentication does not fail as expected for some scenarios when sof... |
critical | 9.8 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-86350 Inconsistent interpretation of HTTP/2 requests ('HTTP Request/Response smuggling... |
critical | 9.1 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-89282 The Apache Lounge Windows distribution of Apache HTTP Server build contains an i... |
critical | 9.1 | — | — | 2026-09-22 | 2026-09-23 |
| CVE-2026-92717 Covenant through 0.6 registers the CovenantHub SignalR hub without an Authorize... |
critical | 9.1 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-96560 LightLLM through 1.2.0 contains a remote code execution vulnerability in the KV-... |
critical | 9.8 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-90937 froxlor versions before 2.2.5 fail to validate newline characters in subdomain r... |
critical | 9.9 | — | — | 2026-09-14 | 2026-09-23 |
| CVE-2026-85672 zerox 1.1.20 contains an OS command injection vulnerability in the file download... |
critical | 9.8 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85684 marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /mar... |
critical | 9.1 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85181 CAT uses Java String.hashCode as the sole integrity check for session cookies wi... |
critical | 9.8 | — | — | 2026-09-03 | 2026-09-23 |
| CVE-2026-85661 excel-mcp-server 0.1.8 fails to enforce path confinement in stdio mode when EXCE... |
critical | 9.8 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-90558 sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attri... |
critical | 9.8 | — | — | 2026-09-12 | 2026-09-23 |
| CVE-2026-90919 LightLLM through 1.2.0 contains a remote code execution vulnerability in the Con... |
critical | 9.8 | — | — | 2026-09-14 | 2026-09-23 |
| CVE-2026-90942 Casdoor through 4.4.0 fails to properly mask the instance-wide built-in certific... |
critical | 9.6 | — | — | 2026-09-14 | 2026-09-23 |
| CVE-2026-90945 Crawlab through 0.6.3 uses a hard-coded HMAC-SHA256 secret for JWT token signing... |
critical | 9.8 | — | — | 2026-09-14 | 2026-09-23 |
| CVE-2026-91998 Casdoor through 4.4.0 contains an authorization bypass vulnerability in the /api... |
critical | 9.9 | — | — | 2026-09-15 | 2026-09-23 |
| CVE-2026-84699 Team Password Manager before 14.184.308 fails to enforce authentication requirem... |
critical | 9.1 | — | — | 2026-09-02 | 2026-09-23 |
| CVE-2026-93616 Check Point Multiple Products Path Traversal Vulnerability |
critical | 9.8 | Listed | Check Point / Multiple Products | 2026-09-22 | 2026-09-23 |
| CVE-2026-54687 n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. |
critical | 9.8 | — | Dangerblack / n8n-node-sqlite3 | 2026-08-27 | 2026-09-23 |
| CVE-2026-43641 Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains an OS command... |
critical | 9.8 | — | — | 2026-09-22 | 2026-09-23 |
| CVE-2026-83099 Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component... |
critical | 10.0 | — | Oracle / forms | 2026-09-15 | 2026-09-23 |
| CVE-2026-83104 Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component... |
critical | 9.1 | — | Oracle / forms | 2026-09-15 | 2026-09-23 |
| CVE-2026-83100 Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component... |
critical | 9.8 | — | Oracle / forms | 2026-09-15 | 2026-09-23 |
| CVE-2026-83098 Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component... |
critical | 9.8 | — | Oracle / forms | 2026-09-15 | 2026-09-23 |
| CVE-2026-83095 Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component... |
critical | 9.8 | — | Oracle / forms | 2026-09-15 | 2026-09-23 |
| CVE-2026-83094 Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component... |
critical | 9.8 | — | Oracle / forms | 2026-09-15 | 2026-09-23 |
| CVE-2026-83040 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware... |
critical | 9.6 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-23 |
| CVE-2026-83039 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware... |
critical | 9.9 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-23 |
| CVE-2026-83037 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware... |
critical | 9.8 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-23 |
| CVE-2026-83036 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware... |
critical | 9.8 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-23 |
| CVE-2026-83035 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware... |
critical | 9.8 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-23 |
| CVE-2026-83031 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware... |
critical | 9.9 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-23 |
| CVE-2026-83108 Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component... |
critical | 9.8 | — | Oracle / forms | 2026-09-15 | 2026-09-23 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.