September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,290
Critical
1,223
High
4,344
Medium
4,103
Low
460
Severity not reported
1,160
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-84694 Coolify before 4.2.0 fails to properly escape environment variable key names in... |
high | 8.8 | — | — | 2026-09-02 | 2026-09-10 |
| CVE-2026-84715 FeatherPanel versions before 1.3.7.10 fail to validate permissions in the Subuse... |
high | 8.8 | — | — | 2026-09-02 | 2026-09-10 |
| CVE-2026-85182 vhr through commit 03abbd3 fails to verify that the account ID in PUT /hr/pass r... |
high | 7.5 | — | — | 2026-09-03 | 2026-09-10 |
| CVE-2026-85211 Label Studio fails to apply organization filters when resolving storage URIs for... |
high | 7.7 | — | — | 2026-09-03 | 2026-09-10 |
| CVE-2026-85212 CRMEB contains an authentication bypass vulnerability in the verifyAuth() method... |
high | 8.3 | — | — | 2026-09-03 | 2026-09-10 |
| CVE-2026-85213 Kill Bill through 0.24.21 fails to enforce permission annotations on several Adm... |
high | 7.6 | — | — | 2026-09-03 | 2026-09-10 |
| CVE-2026-85214 vhr fails to validate user authorization in the PUT /hr/info endpoint, allowing... |
high | 8.1 | — | — | 2026-09-03 | 2026-09-10 |
| CVE-2026-85390 Checkmate through 3.11.0 omits the isAllowed role guard middleware on maintenanc... |
high | 7.1 | — | — | 2026-09-03 | 2026-09-10 |
| CVE-2026-85607 Blinko 1.8.7 contains an authorization bypass (IDOR) vulnerability in multiple t... |
high | 8.8 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85608 Douyin_TikTok_Download_API through 4.1.2 contains a server-side request forgery... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85619 AppFlowy-Cloud 0.9.64 fails to verify that requested collab objects belong to th... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85687 surya 0.22.1 screenshot server contains an unauthenticated arbitrary file read v... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85694 LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkd... |
high | 8.1 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-87816 PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condit... |
high | 7.5 | — | — | 2026-09-09 | 2026-09-10 |
| CVE-2026-77974 After spoofing the device and obtaining one user confirmation, an attacker may b... |
high | 8.0 | — | — | 2026-09-09 | 2026-09-10 |
| CVE-2026-81640 An attacker could derive the camera's Wi-Fi password and connect to its wireless... |
high | 8.8 | — | — | 2026-09-09 | 2026-09-10 |
| CVE-2026-82563 An attacker could impersonate the camera and place themselves in a man-in-the-mi... |
high | 7.6 | — | — | 2026-09-09 | 2026-09-10 |
| CVE-2026-15913 In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteF... |
high | 7.7 | — | — | 2026-09-09 | 2026-09-10 |
| CVE-2026-87803 An authorization bypass vulnerability exists in the Countly Server DBViewer due... |
high | 7.1 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-87961 ESP32-audioI2S versions 3.4.4 through 4.0.0 contain a heap-based out-of-bounds r... |
high | 7.1 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-87962 t-digest versions 3.1 through 3.3 contain a denial of service vulnerability in M... |
high | 7.5 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-84696 Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privilege... |
high | 8.2 | — | — | 2026-09-02 | 2026-09-10 |
| CVE-2026-85180 Ollama fails to validate redirect destinations when pulling tensor-layer models,... |
high | 7.5 | — | — | 2026-09-03 | 2026-09-10 |
| CVE-2026-73786 A vulnerability in the web-based management interface of CPPM could allow an una... |
high | 7.5 | — | — | 2026-09-09 | 2026-09-10 |
| CVE-2026-79908 Acrobat Reader is affected by an out-of-bounds write vulnerability that could re... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81783 Subscriber Broken Authentication in MailMunch – Grow your Email List <= 3.2.5 ve... |
high | 7.1 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-81795 Unauthenticated Cross Site Scripting (XSS) in Page Visits Counter – Lite <= 1.2.... |
high | 7.1 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-81803 Subscriber Remote Code Execution (RCE) in RepairBuddy <= 4.1224 versions. |
high | 7.5 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-84821 Unauthenticated Broken Access Control in WP Fast Total Search <= 1.82.284 versio... |
high | 7.5 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-84195 Kyverno before 1.16.4 automatically attaches the admission controller's ServiceA... |
high | 7.7 | — | — | 2026-09-01 | 2026-09-10 |
| CVE-2026-84196 Kyverno before 1.18.0 contains a server-side request forgery vulnerability in ap... |
high | 7.7 | — | — | 2026-09-01 | 2026-09-10 |
| CVE-2026-79909 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-78464 Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module... |
high | 7.0 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-10 |
| CVE-2026-88867 WWBN AVideo, in versions up to and including commit c3edcc274c389816d434acadac07... |
high | 8.7 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-88868 AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored... |
high | 8.7 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-88872 AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-... |
high | 7.1 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-88873 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a c... |
high | 7.1 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-88863 capgo.app (npm package `capgo`) through version 12.207.1 does not compare the ca... |
high | 8.1 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-87822 t-digest versions 3.1 through 3.3 fail to validate centroid means during deseria... |
high | 7.5 | — | — | 2026-09-09 | 2026-09-10 |
| CVE-2026-87922 A security flaw has been discovered in Rizwan17 inventory-management-system up t... |
high | 7.3 | — | — | 2026-09-09 | 2026-09-10 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.