September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,290
Critical
1,223
High
4,344
Medium
4,103
Low
460
Severity not reported
1,160
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-65829 MPXJ is an open source library to read and write project plans from a variety of... |
medium | 5.3 | — | — | 2026-09-22 | 2026-09-23 |
| CVE-2026-79767 Gardener implements the automated management and operation of Kubernetes cluster... |
medium | 5.5 | — | — | 2026-09-22 | 2026-09-23 |
| CVE-2026-83801 Nautobot is a Network Source of Truth and Network Automation Platform. |
medium | 5.4 | — | — | 2026-09-22 | 2026-09-23 |
| CVE-2026-77425 Unleash is an open-source feature management platform. |
medium | 4.3 | — | — | 2026-09-22 | 2026-09-23 |
| CVE-2026-73858 Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building too... |
medium | 5.3 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-88974 WPGraphQL provides a GraphQL API for WordPress sites. |
medium | 5.4 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-78560 The Okta Access Gateway includes an optional pass-through authentication source... |
medium | 6.5 | — | Okta / access gateway | 2026-09-08 | 2026-09-23 |
| CVE-2026-96443 Insufficient validation of the JDBC driver URL in Apache Doris allows a privileg... |
medium | 6.5 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-80444 URL redirection to untrusted site ('open redirect') vulnerability in Abis Techno... |
medium | 5.4 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-77112 Server-Side request forgery (SSRF) vulnerability in Global IT Informatics Techno... |
medium | 6.5 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-87252 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
medium | 6.8 | — | Oracle / agile product lifecycle management | 2026-09-15 | 2026-09-23 |
| CVE-2026-87253 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
medium | 6.1 | — | Oracle / agile product lifecycle management | 2026-09-15 | 2026-09-23 |
| CVE-2026-78552 The Okta Access Gateway does not apply its Lua directive restriction to the appl... |
medium | 4.9 | — | Okta / access gateway | 2026-09-08 | 2026-09-23 |
| CVE-2026-94382 Beszel before 0.19.0 contains an insecure direct object reference vulnerability... |
medium | 4.2 | — | — | 2026-09-21 | 2026-09-23 |
| CVE-2026-59830 Discourse is an open-source discussion platform. |
medium | 5.4 | — | — | 2026-09-21 | 2026-09-23 |
| CVE-2026-92570 reNgine through 2.2.0 contains an authorization bypass vulnerability in the GetF... |
medium | 6.5 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-92601 Guns through 8.3.5 contains an improper access control vulnerability in SysNotic... |
medium | 6.5 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-92754 PatrowlManager through 1.8.4 contains an improper access control vulnerability i... |
medium | 4.3 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-92778 CMAK through 3.0.0.6 fails to apply the scheduled leader election feature toggle... |
medium | 5.4 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-50022 Metacat is data repository software that helps researchers preserve, share, and... |
medium | 5.8 | — | — | 2026-09-17 | 2026-09-23 |
| CVE-2026-62282 OpenCVE is a vulnerability intelligence platform. |
medium | 6.5 | — | — | 2026-09-18 | 2026-09-23 |
| CVE-2026-93750 http-cache-semantics through 4.2.0 contains a cache validation vulnerability in... |
medium | 5.9 | — | — | 2026-09-18 | 2026-09-23 |
| CVE-2026-92565 Rallly before 4.15.0 contains an information disclosure vulnerability in the pol... |
medium | 5.3 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-92568 MLRun through 1.11.0 contains a server-side request forgery vulnerability in the... |
medium | 5.4 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-92600 Guns through 8.3.5 contains an information disclosure vulnerability in SysUserCo... |
medium | 6.5 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-92760 Shlink through 5.1.6 fails to enforce API key role restrictions when issuing Mer... |
medium | 6.5 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-92771 Twenty before 2.35.0 fails to validate field and row permissions in the groupBy-... |
medium | 6.5 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-89267 starlette-admin versions 0.16.1 through 0.17.1 fail to enforce the searchable_fi... |
medium | 4.3 | — | — | 2026-09-12 | 2026-09-23 |
| CVE-2026-89268 QloApps through 1.7.0 renders back-office list filter POST parameters into HTML... |
medium | 5.4 | — | — | 2026-09-12 | 2026-09-23 |
| CVE-2026-90472 msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUn... |
medium | 5.3 | — | — | 2026-09-12 | 2026-09-23 |
| CVE-2026-90473 msgpack-java through 0.9.12 contains an integer overflow vulnerability in Messag... |
medium | 5.3 | — | — | 2026-09-12 | 2026-09-23 |
| CVE-2026-90474 MCPHub before 1.0.32 contains an authentication bypass vulnerability in its embe... |
medium | 6.8 | — | — | 2026-09-12 | 2026-09-23 |
| CVE-2026-90557 Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability... |
medium | 6.1 | — | — | 2026-09-12 | 2026-09-23 |
| CVE-2026-90934 EspoCRM before 10.0.4 contains a field-level security bypass vulnerability in th... |
medium | 4.3 | — | — | 2026-09-14 | 2026-09-23 |
| CVE-2026-90939 novel-plus through 5.3.3 contains an information disclosure vulnerability in the... |
medium | 6.5 | — | — | 2026-09-14 | 2026-09-23 |
| CVE-2026-90941 novel-plus through 5.3.3 contains an authorization bypass vulnerability in the B... |
medium | 4.3 | — | — | 2026-09-14 | 2026-09-23 |
| CVE-2026-91081 Docs through 5.6.1 contains a server-side request forgery vulnerability in the c... |
medium | 5.8 | — | — | 2026-09-14 | 2026-09-23 |
| CVE-2026-91146 Takahe through 0.11.0 fails to restrict URL schemes in link hrefs within federat... |
medium | 6.1 | — | — | 2026-09-14 | 2026-09-23 |
| CVE-2026-91750 WeKnora before 0.7.0 fails to re-validate HTTP redirect targets in the POST /api... |
medium | 6.5 | — | — | 2026-09-15 | 2026-09-23 |
| CVE-2026-91770 IceHRM before 36.0.0 fails to validate employee ownership on seven REST sub-reso... |
medium | 6.5 | — | — | 2026-09-15 | 2026-09-23 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.