September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,364
Critical
1,230
High
4,374
Medium
4,126
Low
462
Severity not reported
1,172
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (964), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-79906 Substance3D - Modeler is affected by an out-of-bounds write vulnerability that c... |
high | 7.8 | — | Adobe / substance 3d modeler | 2026-09-22 | 2026-09-25 |
| CVE-2026-83962 Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability... |
high | 7.8 | — | Adobe / substance 3d modeler | 2026-09-22 | 2026-09-25 |
| CVE-2026-75649 Bridge is affected by a Heap-based Buffer Overflow vulnerability that could resu... |
high | 7.8 | — | Adobe / bridge | 2026-09-22 | 2026-09-24 |
| CVE-2026-76190 ColdFusion is affected by an Improper Neutralization of Directives in Dynamicall... |
high | 8.6 | — | Adobe / coldfusion | 2026-09-08 | 2026-09-18 |
| CVE-2026-75993 ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. |
high | 8.5 | — | Adobe / coldfusion | 2026-09-08 | 2026-09-18 |
| CVE-2026-75998 ColdFusion is affected by an Improper Access Control vulnerability that could le... |
high | 7.5 | — | Adobe / coldfusion | 2026-09-08 | 2026-09-18 |
| CVE-2026-75990 Illustrator is affected by an Incorrect Authorization vulnerability that could r... |
high | 8.6 | — | Adobe / illustrator | 2026-09-08 | 2026-09-18 |
| CVE-2026-75991 Illustrator is affected by an Improper Input Validation vulnerability that could... |
high | 8.6 | — | Adobe / illustrator | 2026-09-08 | 2026-09-18 |
| CVE-2026-75992 Illustrator is affected by an out-of-bounds write vulnerability that could resul... |
high | 7.8 | — | Adobe / illustrator | 2026-09-08 | 2026-09-18 |
| CVE-2026-75999 ColdFusion is affected by an Improper Input Validation vulnerability that could... |
high | 8.4 | — | Adobe / coldfusion | 2026-09-08 | 2026-09-18 |
| CVE-2026-76191 Animate is affected by an Improper Control of Generation of Code ('Code Injectio... |
high | 8.2 | — | Adobe / animate | 2026-09-08 | 2026-09-15 |
| CVE-2026-75631 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-09-08 | 2026-09-14 |
| CVE-2026-77108 Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul... |
high | 7.5 | — | Adobe / commerce | 2026-09-08 | 2026-09-11 |
| CVE-2026-82006 Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that... |
high | 7.8 | — | Adobe / photoshop | 2026-09-08 | 2026-09-11 |
| CVE-2026-82007 Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability... |
high | 7.8 | — | Adobe / photoshop | 2026-09-08 | 2026-09-11 |
| CVE-2026-82005 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-09-08 | 2026-09-11 |
| CVE-2026-76199 Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerabili... |
high | 8.6 | — | Adobe / photoshop | 2026-09-08 | 2026-09-11 |
| CVE-2026-75863 Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability... |
high | 7.8 | — | Adobe / photoshop | 2026-09-08 | 2026-09-11 |
| CVE-2026-75862 Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability... |
high | 7.8 | — | Adobe / photoshop | 2026-09-08 | 2026-09-11 |
| CVE-2026-75771 Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability... |
high | 7.8 | — | Adobe / photoshop | 2026-09-08 | 2026-09-11 |
| CVE-2026-77111 Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul... |
high | 8.7 | — | Adobe / commerce | 2026-09-08 | 2026-09-11 |
| CVE-2026-81996 Acrobat Reader is affected by an Incorrect Authorization vulnerability that coul... |
high | 8.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-77110 Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restrict... |
high | 7.6 | — | Adobe / commerce | 2026-09-08 | 2026-09-10 |
| CVE-2026-81992 Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that co... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81987 Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability th... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-80161 Acrobat Reader is affected by an Access of Resource Using Incompatible Type ('Ty... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-79907 Acrobat Reader is affected by a Double Free vulnerability that could result in a... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-79908 Acrobat Reader is affected by an out-of-bounds write vulnerability that could re... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-79909 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81973 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81975 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81976 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81979 Acrobat Reader is affected by an out-of-bounds write vulnerability that could re... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81980 Acrobat Reader is affected by an out-of-bounds write vulnerability that could re... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81981 Acrobat Reader is affected by an out-of-bounds write vulnerability that could re... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81983 Acrobat Reader is affected by an out-of-bounds write vulnerability that could re... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81985 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81986 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-76202 Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul... |
high | 8.2 | — | Adobe / commerce | 2026-09-08 | 2026-09-10 |
| CVE-2026-81988 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.